Privacy Policy
1. Who we are
Yard Picker Pro is operated by David Crivac. Contact: davidcrivac@gmail.com.
2. What we collect
Anonymous usage analytics — we use Umami, a privacy-friendly analytics tool. Umami records page views, referrer, browser type, country (from IP, not stored), and a few custom events (e.g. "you clicked Analyze"). It does not store your IP address, does not use cookies, and does not assign you a persistent identifier across sessions. You cannot be personally identified from this data.
Server logs and rate limiting — our server temporarily records your IP address to enforce rate limits (so one user can't drain the AI API). These logs are not retained long-term and are not used for any other purpose.
Browser storage on your device — the app stores your part tracker, saved preferences, and analysis history in your browser's localStorage. This data never leaves your device. We can't see it. Clear it any time by clearing your browser data for our domain.
3. What we don't collect
- Your name, email, phone number, or address (the app has no accounts yet).
- Your payment information.
- Your eBay account, listings, or sales data.
- Your Pick Your Part account or purchase history.
- Cookies of any kind.
- Cross-site tracking identifiers.
4. Third parties we send data to
When you use the Service, certain requests are forwarded to:
- Anthropic — receives the vehicle list you ask us to analyze. No personal information is included.
- eBay — receives anonymous public-listing search queries (e.g. "2009 Chevrolet Silverado ECU"). No personal information is included. We participate in the eBay Partner Network: links to eBay from the app may carry an affiliate tag, and we may earn a commission on resulting purchases. This does not affect the price you pay or which parts we recommend.
- Pick Your Part (pyp.com) — we fetch their public inventory pages. They may log standard server-side request info; we don't control or share that.
- Umami — anonymous page-view and event data as described above.
- SiteGround — our hosting provider; standard server logs.
5. Data retention
Server rate-limit logs: rotated daily, not retained beyond ~24 hours. Anonymous Umami analytics: retained per Umami Cloud's retention policy (currently indefinite, but cannot be linked to you). Your browser localStorage data: retained until you clear it.
6. Your rights
California residents (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We don't sell personal information. Because we don't collect personal information that identifies you, there's nothing to delete on our side beyond what you can clear yourself from your browser storage.
EU residents (GDPR): You have rights of access, rectification, erasure, restriction, portability, and objection. Again, because we don't collect identifying personal data, most of these don't apply — but if you believe we have data about you, email us and we'll investigate.
To exercise any right, email davidcrivac@gmail.com.
7. Children's privacy
The Service is not directed to anyone under 18. We don't knowingly collect information from children. If you believe a child has used the Service, contact us and we'll take appropriate action.
8. Security
We use HTTPS for all traffic. Server-side API keys are stored in environment variables, not in source code. We rate-limit and validate all incoming requests. No system is perfectly secure, but we apply reasonable safeguards proportionate to the risk.
9. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
10. Contact
Questions about this Policy: davidcrivac@gmail.com
See also our Terms of Service.