Privacy Policy

SpeedSpec is operated by SpeedSpec LLC, a Virginia limited liability company (“SpeedSpec”, “we”, “us”). SpeedSpec is a platform for discovering automotive parts, checking fitment, and planning builds. Questions about this policy? Email contact@speedspec.com.

• Account information — when you create an account, your email address and authentication details (handled by our authentication provider).
• Content you create — the builds you plan, the parts and builds you save, and any reviews you write.
• Usage & device data — standard log data (IP address, browser type, pages viewed) collected automatically to operate and secure the service.
• Local storage — an in-progress build is saved in your browser’s local storage so you don’t lose it; it stays on your device until you sign in and save it.

To provide and maintain the service (save your builds, display reviews, keep you signed in), to secure it against abuse, to respond to you, and to improve our features and catalog. We do not sell your personal information.

We rely on third-party providers to run SpeedSpec — including our hosting and database/ authentication infrastructure (Supabase) and application hosting (Vercel), error monitoring (Sentry), and, with your consent, product analytics (PostHog). They process data on our behalf under their own terms. Our AI catalog-enrichment provider processes catalog and product data, not your personal account information.

Separately, some “buy” links pass through an affiliate network before reaching the retailer — CJ Affiliate, Impact, Rakuten Advertising, Awin, or the eBay Partner Network, depending on the store. These networks are not our processors: they are independent companies that decide for themselves what to collect, and they typically set their own cookie in your browser to credit the referral. Which networks apply depends on which retailers we currently work with, and it changes over time. See “Affiliate links” below.

SpeedSpec participates in affiliate programs. When you click a “buy” link and purchase from a retailer (such as Amazon or other partners), we may earn a commission at no extra cost to you. Those purchases happen on the retailer’s own site under their privacy policy and terms — we are not the seller and do not process your payment.

How the link works. A “buy” link goes to a SpeedSpec address first, so we can count the click. We record that click with a one-way scrambled form of your IP address (which we cannot reverse into an IP address), the page you clicked from, your browser’s user-agent string, and the referring page — never your name or email. We use it to know which parts people are actually buying. For some retailers the link then passes through that retailer’s affiliate network before landing on the product page; the network sets its own cookie so the retailer knows the sale came from us. We pass along a short code identifying the click — it is a separate one-way scramble of the same information, so it is not your IP address, cannot be turned back into one, and cannot be used to work out the scrambled form we keep; clicking the same link again on the same day produces the same code. We never share the scrambled IP itself.

Because this is how a purchase gets credited rather than advertising or profiling, it is not covered by the analytics consent banner and does not stop when you send a Global Privacy Control signal — those control the analytics described below, which are separate. If you would rather not be routed through an affiliate network at all, you can copy the product name into the retailer’s own site and buy there directly; nothing about SpeedSpec changes if you do.

We use cookies and similar technologies that are strictly necessary to keep you signed in and to operate core features — these are always on.

With your consent, we also use analytics cookies (PostHog) to understand how the service is used so we can improve it. We ask for that consent through a cookie banner on your first visit: analytics loads only after you choose “Accept,” never before, and never while your browser sends a Global Privacy Control signal. Analytics events never include your email address or the content of your reviews, reports, or messages — they are usage events (which include the search terms you enter and the pages you visit), plus your username once you are signed in.

You can withdraw consent at any time from our Do Not Sell or Share page, which stops analytics on that browser. You can also control cookies through your browser settings, though some features may not work without the strictly-necessary ones.

We keep your information for as long as your account is active or as needed to provide the service. You can request access to, correction of, or deletion of your personal data by emailing contact@speedspec.com. Deleting your account removes your saved builds, saved items, and reviews.

We do not sell your personal information in the conventional sense. Depending on where you live, some privacy laws (such as California’s CCPA/CPRA) define “sale” and “sharing” broadly enough to include certain analytics. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out for those analytics, and you can withdraw analytics consent for a browser at any time. Crediting a purchase to us when you use a “buy” link is separate and works differently — it is described under “Affiliate links” above. See our Do Not Sell or Share My Personal Information page for details and controls.

We take reasonable measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

SpeedSpec is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. We’ll revise the “Last updated” date above and, where appropriate, notify you of material changes.