Privacy Policy: VIN Lookup & Recalls

Chrome extension by Torque & Coin. Last updated: October 30, 2026

Short version: we don't collect, sell, or store your data on our servers.

What the extension processes. When you paste, highlight, or right-click a VIN, the extension reads only that text. It reads page content only when you open the popup or use the right-click menu, and only the text you selected.

Where requests go. The VIN, or the vehicle's year/make/model, is sent straight from your browser to:

• NHTSA vPIC (vpic.nhtsa.dot.gov) to decode the VIN
• NHTSA Recalls API (api.nhtsa.gov) to list recalls
• Pull-A-Part's public inventory service (pullapart.com), Pro only, with make/model/year only and never the VIN

These are public services with their own privacy policies. Torque & Coin runs no server that receives your lookups.

Stored on your device. We use Chrome's local storage for your daily lookup count and, on Pro, your lookup history (up to 200 VINs). You can clear it any time by removing the extension or clearing extension data.

Payments. Upgrades are handled by ExtensionPay (extensionpay.com) and Stripe. We never see your card number. ExtensionPay keeps your email and payment status so your Pro access works across devices. See https://extensionpay.com/privacy.

No tracking. No analytics, no ads, no sale or transfer of data to third parties, and no use of data for creditworthiness or lending. Use of data follows the Chrome Web Store User Data Policy, including the Limited Use requirements.

Children. Not directed to children under 13.

Contact. [email protected]