Privacy, in plain language.

What you send

A lookup contains the option you selected, your car name or optional context, and the image you selected if you use photo or screenshot mode. Images are prepared in your browser as JPEGs before submission. The site does not upload a selected image until you select “Identify this car.”

Submit only content you have permission to share. Before uploading, review the image for details such as faces, number plates, addresses, or location information.

Where it goes

The browser sends the lookup to this site's Worker. The Worker validates it and forwards the request to the existing Qomza analysis gateway with technical metadata: the selected lookup mode (recorded as the operation), a request identifier generated for each lookup, the app and product name, release and build identifiers (the site's source revision and build time, its Cloudflare build and Worker version, and the open page's own release label), the platform label “web,” the deployment environment label “development,” “staging,” or “production,” where the request ran and how the site was delivered, your browser's preferred language from the Accept-Language header, and — for a live lookup — the IP address Cloudflare provides for your connection. Some identifiers are repeated in request headers. Your image file name is not sent. The gateway can process the request using its configured AI provider to produce a result. This site does not choose a provider or model for your request.

Site analytics

This site is configured for Cloudflare Web Analytics automatic injection. If Cloudflare injects its browser beacon for a page, it reports page visits and paths, referring sources, approximate country, browser and device type, and browser-measured page-load timings such as Core Web Vitals to this site's /cdn-cgi/rum endpoint. Cloudflare says it does not track individual end users across its customers' sites or log query strings. These visit and performance reports are separate from the gateway records created when you submit a lookup. Read Cloudflare's data dimensions, performance metrics, and FAQs.

Car Says Hi also uses PostHog for site analytics and optional session replay on eligible production pages. Without a saved choice, analytics and session replay are enabled on eligible production pages. The banner disappears after 30 seconds without saving a choice. Use “Privacy settings” in the footer to choose Analytics and Session replay separately, reject both, or change a saved choice. Session replay masks input values and blocks private file previews and secret-bearing elements; public page text and public imagery remain visible. PostHog does not receive request or response headers or bodies, or console output. Analysis events can include the lookup's random operation ID and, when the gateway returned one for that operation, its request ID. Qomza can use these identifiers to match analytics events, and any related session recording, to the lookup records kept by its gateway. These identifiers are not derived from your submitted text or image, and events do not include your submitted content or results. Session recordings are available in PostHog for up to 30 days under the current project retention setting. Your saved choice stays in this browser until you clear its storage. Global Privacy Control keeps PostHog analytics and replay off for the visit even if you save a choice. These controls apply to PostHog; they do not control Cloudflare Web Analytics. Its separately configured browser beacon is outside these controls.

Service diagnostics

Car Says Hi uses Sentry to monitor errors and service performance. It records errors, a sample of about 5% of browser and Worker traces for submitted analysis and feedback requests, and counts and durations for completed analysis and feedback-delivery attempts. Preparing feedback is not counted as a delivery attempt; a retry is a separate attempt. Diagnostic records can include the operation outcome and bounded technical identifiers such as request, result, and feedback revision IDs, plus the app release, runtime, and deployment environment. They do not include your submitted text or image, request or response bodies, request headers, query strings, IP address, replay, or page content. Error messages are removed before sending. Sentry uses this information to help diagnose service failures and performance issues. These diagnostics are separate from the content records kept by the Qomza gateway.

How long records are kept

Qomza's gateway keeps what you send for each lookup, the result it returns, and related service information in its records. A record may include the IP address Cloudflare provides for your connection. These records are not deleted automatically; they stay there until the gateway operator removes them. Car Says Hi cannot access or delete these records. For questions or requests, email car@sayshi.app or write to Qomza, LLC, 2810 N Church St, STE 90651, Wilmington, DE 19802, United States. A request does not guarantee deletion.

The site does not save your selected image or lookup in a visitor account. Your current result and image preview remain in this browser tab while the page is open; closing or refreshing the tab clears that local page state.

Choices and limits

You can use Car Says Hi without submitting a lookup. Selecting a file creates a local preview, which you can remove before sending.

Feedback and browser storage

Feedback drafts and pending messages are stored in this browser until they are sent, discarded, or this site's browser storage is cleared. They can contain the feedback category, rating, reason, message, screen and available result references, and an optional reply email. Accepted local receipts retain a bounded copy of those feedback details and references so you can edit feedback as a new revision; the copy, including any reply email, stays in this browser until you discard the receipt or clear this site's browser storage. Removing a local draft, pending message, or receipt does not withdraw feedback already sent. When you select “Save and send feedback,” the site sends the category, rating, reason, message, screen, available result and Gateway request references, feedback revision identifiers, canonical Car app and product metadata, platform, environment, release/build and runtime details, and your browser's preferred language to the Qomza Gateway. A reply email is sent only if you enter it and separately give permission to be contacted. The deployed Worker also forwards the IP address Cloudflare provides for your connection; local Vite and Wrangler development omit visitor and loopback IP headers. Qomza keeps submitted feedback, its metadata, and any permitted reply email in indefinite operational records that are not deleted automatically and remain until the gateway operator removes them. Car Says Hi cannot access or delete those records.

Changes

This notice describes the current implementation and gateway behavior as of October 23, 2026. It will be updated if the site's data flow changes.