Privacy
Privacy
The short version
- This website sets no cookies, runs no analytics and loads no third-party scripts.
- The launch list stores the email address you type and the time you sent it.
- The app has no telemetry. Your recordings and reports are files on your computer.
- AI analysis sends the selected diagnostic data to DeepDiag's relay. The VIN is masked by default.
- Exported reports include the VIN unless you turn on “Redact VIN for privacy” at export.
This website
deepwrench.com is hosted by Cloudflare. It sets no cookies, runs no analytics and loads no third-party scripts or fonts. Cloudflare may process standard request metadata, such as an IP address, as part of hosting.
The launch list
When you sign up, one record is stored: the lowercased email address you typed and the time you sent it. It holds no IP address, browser or referring page. A separate counter used to rate-limit sign-ups keeps a salted, truncated hash of your IP address for 24 hours; it holds a count, never an address.
The address is used to tell you when DeepDiag is ready. It is not a newsletter, and signing up does not create an account or a subscription.
The DeepDiag app
The app has no analytics or telemetry of its own.
On your computer
DeepDiag stores its configuration, sign-in session and cached entitlement in your user profile, and writes recordings and exported reports to its output directory (by default, a reports folder). Recordings can include the VIN and the vehicle data you captured. These files stay on your computer until you delete them.
When you use AI
AI analysis sends a prompt to DeepDiag's relay, which forwards it to OpenRouter, which routes it to the model it selects. Depending on what you choose to analyse, the prompt can include the vehicle's make, model, year, engine and transmission; the mileage when the car reports it; the VIN (masked by default); trouble codes and freeze frames; live data or a recording (a summary by default, or the full timeline if you choose that setting); emissions readiness; recall results; the problem description you type; and follow-up messages.
The relay stores a usage record for the subscription: the model, token counts and duration. It does not store the prompt. OpenRouter and the model provider it routes to process the prompt under their own terms.
Vehicle lookups
To fill in vehicle details, the app can send the VIN to the US National Highway Traffic Safety Administration's vPIC decoder. When you check for recalls, it sends the vehicle's year, make and model to NHTSA's recalls service. Those requests are made directly from your computer.
Account and payments
Sign-in uses a one-time code sent to your email; there is no password. The account is held in Supabase, and the app stores the session tokens locally. Card details go to a payment processor, not to DeepWrench.
Retention and deletion
- Launch list: kept until you ask to be removed or the list is closed.
- Account and usage records: kept while your account is active; usage rows are retained as billing and audit records.
- Local files: kept until you delete them. The app can delete recordings; exported reports are ordinary files.
- AI prompts: not stored by DeepDiag's relay. OpenRouter's and the model provider's retention are governed by their own terms.
To ask for deletion of your launch-list address or account data, email support@deepwrench.com.