Privacy policy
Last updated November 2, 2026
Short version: you can use the free app without an account. Existing account and purchase records are preserved. We keep usage records for capacity controls and may temporarily save generated answers to recover an interrupted request. We never see or store your card number. We don't sell your data or show ads.
What we collect
- Existing accounts: your email address and a securely hashed version of your password (we can't read your password). New signups are disabled.
- Previous credits and purchases: your credit balance, and for each previous purchase the pack, amount, date and Stripe's reference number. New credit purchases are disabled.
- Usage and request recovery: a count of the inquiries you run, with their date and our estimated cost to generate them, plus budget reservations. Completed responses are available for recovery for 24 hours; expired response content is cleared during cleanup. A request fingerprint and status may remain to prevent duplicate processing.
- Previous free lookups and signup credits: when these were offered, we stored a one-way scrambled (hashed) version of your IP address with a daily count. Existing records remain stored; new lookups and signups do not create these records. We did not store the IP address itself in those records.
- Server logs: like most websites, our hosting provider records requests (including IP address) for security and troubleshooting.
- Your browser: the app remembers your last vehicle and location settings on your own device (browser local storage), and uses one sign-in cookie. No advertising or tracking cookies.
Who we share it with
Only the services needed to run WhatWrench:
- Stripe processes payments. Your card details go directly to Stripe; we never see them. Stripe's privacy policy.
- Anthropic (the Claude AI) receives the vehicle and job you enter so it can write your tool list. Your email and account details are not sent. Anthropic's privacy policy.
- OpenStreetMap services (Nominatim, Photon) receive the ZIP code, city or map location you use to find nearby stores, and your browser loads map images from OpenStreetMap. The US government's NHTSA database is used to decode VINs.
- Replit and Cloudflare host the app and website.
We don't sell or rent your information, and we don't use it for advertising. We'll disclose information only if the law requires it.
How long we keep it
We keep your account and purchase records while your account exists, and purchase records as long as tax law requires. Server logs are kept for a limited time by our host.
Your choices
You can ask us to show you, correct or delete your account data at any time by emailing [email protected]. Deleting your account removes any unused credits. You can clear the information saved in your browser by clearing site data for whatwrench.com.
Children
WhatWrench is not meant for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top and note significant changes on the site.
Contact
[email protected]