Privacy Policy

VIN Foundry has no accounts and no database. This page says exactly what happens to a request, including the parts that are not nothing.

What the site does not do

• No accounts. There is no signup, no login and no API key.
• No cookies. The site sets none, and nothing it serves reads one.
• No analytics, no tracking pixels, and no third-party scripts of any kind. The font is served from this origin rather than a font CDN for the same reason.
• No browser storage. Nothing is written to local storage, session storage or IndexedDB.

VINs

A VIN you decode or generate is processed in memory to answer that one request and is never written to a log, a database or a file. The service is stateless: after the response is sent there is nothing left of it. When a decode fails, the reason is logged without the VIN that caused it.

What is processed

Two things, and they are worth naming plainly rather than hiding behind “we collect nothing”:

• Your IP address is used, transiently and in memory, to apply the per-IP rate limit. It is held only for the length of the rate-limit window and is not stored beyond it.
• Ordinary access logs — the sort every web server and CDN keeps: time, path, status, user agent and requesting address. They exist to keep the service running and to investigate abuse.

Sharing

None of what this page describes is ever sold, rented or shared with anyone, and there is no advertising network, data broker or analytics vendor involved in serving this site.

Changes

If this policy changes, the date below changes with it.

Contact

Questions about this policy, or about anything on this site, can go to:

Last updated 29 August 2026.