Privacy Policy

1. Who is responsible

The controller of your personal data is the operator of MyCarNoise, based in Bulgaria (European Union). For any privacy question or request, use the contact form and choose "Privacy request".

2. What we collect

When you run a car check, we process:

• Your car: make, model, year, engine, mileage range and where it was first sold, or the details you type in yourself.
• Your case: the problem area you picked, your description, your answers to the follow-up questions and the result.
• Technical data: the language you use, your approximate country (provided by our hosting provider), a random device ID stored in a cookie, and a scrambled (hashed) form of your internet address. We never store your internet address in readable form.
• Bot check: Cloudflare Turnstile receives your internet address and technical browser information to tell people from robots.
• If you contact us: your name, your email address and your message.

3. Why we use it, and on what legal basis

• To run the check you asked for and show you the result (performance of our service, Article 6(1)(b) GDPR).
• To protect the service: free daily limits, bot protection and preventing abuse (our legitimate interest, Article 6(1)(f) GDPR).
• To improve MyCarNoise and keep simple statistics, for example which car makes and problems are most common (our legitimate interest, Article 6(1)(f) GDPR).
• To answer your messages and privacy requests (Article 6(1)(b) and (f) GDPR).
• To meet legal obligations where they apply (Article 6(1)(c) GDPR).

4. How the AI is used

To write the follow-up questions and the diagnosis, we send your car details, problem area, description and answers to our AI provider, Anthropic. We do not send your name, email address or internet address. According to its terms for business customers, the provider does not use this data to train its AI models.

The results are produced automatically and are for information only. No decision with legal or similarly significant effects on you is made automatically.

5. Cookies and data stored in your browser

We only use what is needed for the website to work, so we do not show a cookie banner. If we add advertising later, we will ask for your consent first.

• autodx_locale (cookie, 1 year): remembers your language.
• autodx_did (cookie, 1 year): a random device ID used for the free daily limit and abuse protection.
• autodx.myCar.v1 (browser storage): your car, only if you tick "Remember my car on this device". It stays in your browser and you can delete it at any time.
• Cloudflare Turnstile may use technical data in your browser for the bot check.
• Visit statistics come from Vercel Web Analytics, which does not use cookies and does not follow you across websites. Result pages are counted without their individual address.

6. Who receives your data

We use carefully chosen service providers who process data on our behalf and under our instructions:

• Vercel Inc.: hosting of the website and visit statistics.
• Neon: our database, located in the EU (Frankfurt, Germany).
• Anthropic: the AI that writes the questions and the diagnosis.
• Cloudflare: the "I'm human" bot check.
• Resend: delivery of contact-form messages to our inbox.

7. Transfers outside the EU

Some of these providers are based in the United States or process data worldwide. Where data leaves the European Economic Area, the transfer is protected by the EU-U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

8. How long we keep data

• Cases (car, description, answers, result, device ID, hashed internet address, country): up to 24 months, then deleted or made anonymous. The device ID and hashed address are only used for the 24-hour limits and abuse protection.
• Contact messages: up to 12 months after your request has been dealt with.
• Data in your browser: until you delete it or it expires (cookies after 1 year).

9. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to data portability. To use these rights, send us a privacy request through the contact form. If you have the link to your result page, include it: it helps us find your case, because we do not know who you are.

You also have the right to complain to a data-protection authority. In Bulgaria this is the Commission for Personal Data Protection (www.cpdp.bg); you can also contact the authority in your own country.

10. Children

MyCarNoise is not directed at children under 16.

11. Security

The website is only available over an encrypted connection (https). Access to stored data is restricted, and internet addresses are only stored in hashed form.

12. Changes to this policy

We may update this policy when the service changes. The date at the top shows the latest version.