Privacy policy

Minted Auto turns your car into a collectible trading card. To do that we need your email, your car, and — if you want prints or a verified badge — an address and proof you own the car. We do not sell your personal information, we do not run advertising trackers, and you can delete your account and its data from your profile at any time.

Your VIN and your ownership documents are never shown publicly. Your card, its specs and its photo are public to anyone with the link.

• Email address. You sign in with a one-time link, so we need an address that reaches you. It is visible to you and to our review team, and never to other users.
• Display name. We make one up for you out of car parts — Chrome Octane, Midnight Throttle — so nothing about your real name or email ends up in it. Change it to whatever you like.
• Your car and its photo. Year, make, model, specs and the picture you upload. This is the card, so it is public once the card is published. We strip embedded photo metadata, including GPS location, before the file is stored.
• VIN. Only if you enter one. It is used to decode your car's factory specs and to check that one physical car is verified on one card. It is stored privately and never appears on the card.
• Ownership documents. Only if you ask to be verified. A photo of a registration or title, stored in a private bucket that only our review team can open.
• Shipping name and address. Only if you order physical cards, and only to get them to you.
• Instagram handle. Only if you add one to a card. It is a public link on that card's page, which is the point of it — remove it from the card at any time and the link goes.
• Change requests. What you tell us about your build, plus any files you attach as proof.
• Scan counts. When a printed card's QR code is scanned we add one to a counter. Nothing about the person scanning is recorded — see below.

We do not use advertising or social media trackers, we do not build a profile of you across other sites, and we do not use a third-party analytics service.

Card owners want to know whether their card is getting passed around, so each printed card keeps a count of how many times its QR page has been opened, plus the first and last time it happened.

That is the whole thing: a number going up. We do not store your IP address, your browser user-agent, a cookie, a fingerprint, or any identifier of any kind — not even a hashed one. There is no record of your visit as distinct from anyone else's, which means there is nothing here tied to you, nothing to look you up by, and nothing about you to leak.

The trade is accuracy, and we would rather have it this way: because nothing distinguishes one visitor from another, reloading the page counts again, and one person can look like a hundred. We read these numbers as a rough signal of activity, and so should you.

• To create, print and show your card, and to run your collection.
• To sign you in and keep your session alive.
• To confirm you own the car you are claiming, when you ask for the verified badge.
• To ship physical cards you order and to contact you about those orders.
• To keep the service working and to investigate abuse.

A published card page is public. Anyone with the link, including search engines, can see the year, make, model, specs, ratings, photo, how many copies have been collected, and the Instagram handle if you added one.

Not public, ever: your email, your VIN, your ownership documents, your shipping address, your change requests, your collection, and the list of who holds which card.

One thing to decide for yourself: if your licence plate is readable in the photo you upload, it will be readable on the public card. We suggest covering it or picking an angle without it.

• Supabase — our database, authentication, file storage and transactional email. Data is stored in the United States.
• Our hosting provider — serves the site and keeps short-lived request logs.
• NHTSA vPIC — the free United States government VIN decoder. When you press Decode, your VIN is sent to the federal vPIC service to look up factory specs. Nothing else about you goes with it.
• Our print and shipping partners — they receive the card artwork plus the name and address for the order, and nothing more.

We do not sell or share your personal information for money or for cross-context behavioural advertising, as those terms are used in California law. We may disclose information if the law requires it, or to protect the service and its users.

• Ownership documents are deleted as soon as the review is finished — approved or rejected. We keep only the decision and the reviewer note. Nobody needs a scan of your title sitting on a server for years.
• Your account data stays until you delete your account.
• Scan counts stay for the life of the card. They are totals with nobody attached, so there is nothing in them to expire.
• Order records are kept while the order is open and afterwards for as long as tax and accounting rules require.
• Cards that other people have collected stay in circulation after you leave, with your name and account removed. Collectors keep what they hold, including physical cards already printed.

• See and change your data. Your profile, cards and collection are all visible when you are signed in, and you can edit your display name from your profile.
• Delete your account. There is a button on your profile. It removes your profile, email, VINs, ownership documents, change requests, shipping addresses, Instagram handles, your collection and every card nobody else holds. It cannot be undone.
• Ask us anything else. Email privacy@mintedauto.com for a copy of your data, a correction, or a question about any of this. We answer within 45 days and we will not treat you differently for asking.

We set one cookie, and it is the one that keeps you signed in. It is strictly necessary for the service to work, it is not used to track you, and there is no advertising or analytics cookie to opt out of. Signing out clears it. Scan counting sets no cookie and uses no browser storage at all.

Access to every row and every file is enforced by the database itself, not just by the app: your private records are readable only by you and by our review team. Ownership documents live in a private bucket and are opened through links that expire. No system is perfect — if we ever discover a breach affecting your personal information, we will notify you as the law requires.

Minted Auto is not for people under 13. We do not knowingly collect their information, and we delete it if we find it.

We offer this service in the United States, and the data is stored and processed there. If you are in the European Economic Area or the United Kingdom, this service is not directed at you and we are not currently set up to meet the obligations that come with serving you.

If we change this policy in a way that matters, we will update the date at the top and tell the people it affects. Questions, requests, or anything that looks wrong: privacy@mintedauto.com.

See also our terms of service.