Privacy policy

You can search and view parts without an account and without giving us your name. Two cookies are set by us, both first-party:

• dp_vid — a random identifier used to count visits and see which parts get viewed. It is not linked to an account, an email address, or any identity. It expires after a year.
• garage— the vehicle you picked in “My garage”, so we can show whether a part fits it. It holds a year, make and model, nothing about you.

Alongside that we record the page you viewed, the search terms you typed and how many results came back, your device type (mobile or desktop), and the hostname of the site that linked you here — never the full referring address.

We do not store your IP address ourselves, and we do not build a fingerprint of your browser. Visits are grouped into sessions afterwards using a 30-minute gap, rather than by tracking you with another cookie. This analytics data is deleted automatically after 180 days.

Search terms matter to us for one specific reason: a search that returns nothing tells yards what buyers want and cannot find. That signal is used in aggregate and is not tied to you.

Public pages load Google Analytics 4, which counts visits and tells us which pages people arrive on and leave from. It is the only third-party script on this site. It does not run in the yard dashboard.

It sets its own cookies in your browser, named _ga and _ga_*, which distinguish one visitor from another for up to two years. Your IP address is sent to Google, which uses it to work out roughly where you are and then discards it; Google does not make it available to us.

We do not send Google your name, your email address, or anything you type into the contact form — only the pages you look at. If you would rather not be counted, any browser extension that blocks analytics scripts will stop it, and nothing on this site stops working without it.

Sending an inquiry gives us your name, email address, phone number if you provide one, and your message. That goes to the yard selling the part so they can answer you. If the sale proceeds, the yard keeps you in their own customer records, along with the invoice.

A yard is responsible for the records it keeps about its own customers. To have those removed, contact the yard, or write to us and we will pass it on.

Saving a search or watching a part's price stores your email address and what you asked to be told about. Every one of those emails carries a one-click unsubscribe link, and using it deletes the record rather than just muting it.

After buying, you may be emailed a link to review the yard. A review you publish shows the name you give it and is visible to everyone; the rest of your order is not.

Yard staff accounts store an email address, a name, and either a password (stored only as a hash, never in a readable form) or a linked Google account. We use this only to sign you in and to attribute actions inside your yard, such as who changed a price.

Everything a yard enters — vehicles, parts, photos, customers, invoices — belongs to that yard. We do not sell it or share it between yards.

• Our hosting and database provider — stores the site and its data on our behalf.
• Resend — delivers our email (inquiry notifications, price alerts, review requests). They receive the recipient address and the message.
• eBay— where a yard chooses to cross-list, the part's details and photos are sent to eBay to create the listing, and orders placed there are read back. Buying on eBay is governed by eBay's own privacy policy, not this one. We also query eBay anonymously for used-part market prices, which sends no personal data.
• Google (Gemini) — when a yard uses the AI label reader, the photo of the part label it uploaded is sent for text extraction.
• Canada Post — receives a destination postal code and package dimensions to quote a shipping rate. No name or address is sent.
• NHTSA vPIC— the free US government VIN decoder, which receives a donor vehicle's VIN. It is the yard's own scrap vehicle, not a customer's car.

We may also disclose information where the law requires it. Some of these providers operate outside Canada, so data may be processed elsewhere.

• Analytics events — 180 days, then deleted automatically.
• Price and search alerts — until you unsubscribe.
• Inquiries, invoices and customer records — kept by the yard as business records, which they may be required to retain for tax purposes.
• Accounts — until the account is removed.

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Clearing your browser cookies resets the analytics identifier and your garage selection. Alert emails unsubscribe in one click.

Deleting an account does not remove invoices a yard is required to keep, but it does remove your ability to sign in and stops any further email.

This site is intended for people buying and selling vehicle parts, and is not directed at children. We do not knowingly collect information from anyone under 13.

Questions about this policy, or a request about your data, can go to [email protected].

If this policy changes materially we will update the date at the top of this page.