Privacy policy
Last updated September 28, 2026
Short version: we keep your email, your credit balance and your purchase history. We never see or store your card number. We don't sell your data or show ads.
What we collect
- Account: your email address and a securely hashed version of your password (we can't read your password).
- Credits and purchases: your credit balance, and for each purchase the pack, amount, date and Stripe's reference number.
- Usage: a count of the tool lists and store checks you run, with their date and our cost to generate them. We don't keep a copy of the vehicles and jobs you type in or the lists we send back.
- Server logs: like most websites, our hosting provider records requests (including IP address) for security and troubleshooting.
- Your browser: the app remembers your last vehicle and location settings on your own device (browser local storage), and uses one sign-in cookie. No advertising or tracking cookies.
Who we share it with
Only the services needed to run WhatWrench:
- Stripe processes payments. Your card details go directly to Stripe; we never see them. Stripe's privacy policy.
- Anthropic (the Claude AI) receives the vehicle and job you enter so it can write your tool list. Your email and account details are not sent. Anthropic's privacy policy.
- OpenStreetMap services (Nominatim, Photon) receive the ZIP code, city or map location you use to find nearby stores, and your browser loads map images from OpenStreetMap. The US government's NHTSA database is used to decode VINs.
- Replit and Cloudflare host the app and website.
We don't sell or rent your information, and we don't use it for advertising. We'll disclose information only if the law requires it.
How long we keep it
We keep your account and purchase records while your account exists, and purchase records as long as tax law requires. Server logs are kept for a limited time by our host.
Your choices
You can ask us to show you, correct or delete your account data at any time by emailing [email protected]. Deleting your account removes any unused credits. You can clear the information saved in your browser by clearing site data for whatwrench.com.
Children
WhatWrench is not meant for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top and note significant changes on the site.
Contact
[email protected]