Privacy policy

Last updated November 6, 2026. Covers the Carpool website and the Carpool browser extension. Using the extension also means agreeing to the terms.

What Carpool stores

Your account, if you create one: your name, email address, and either a password (stored hashed) or your Google sign-in. Signing in keeps a session cookie in your browser. Carpool also records which version of the terms you agreed to, and when.
Your car lists: for each car, the year, make, model, price, mileage, condition, where it's listed (city and state), and the listing link you saved. Signed in, these are stored in Carpool's database so they sync across devices. Signed out, they stay in your browser.
Market data: every vehicle listing the extension scores is sent to Carpool with its public details (listing id, title, year, make, model, price, mileage, city, and state), signed in or not. Carpool keeps this data to study used-car prices over time. Market data is never shown with anyone's name or email. Your IP address is used only to limit how much one browser can send, and only a scrambled form of it is kept, for at most an hour. Sharing market data is part of using the extension, and you agree to it before the extension reads anything.
Your logged cars: when you're signed in, the listings your extension scores are also recorded against your account (which listing, and when you first and last saw it), so the extension's log shows the same cars on every device you sign in on. Only you can see your log. Each car drops off 14 days after you first saw it, and "Clear log" in the extension deletes it from your account too.
Do not buy flags: when you're signed in and mark a listing "Do not buy" with a reason (such as damage or dealer bait), the listing's id and your reason are stored so other Carpool users who come across that listing see a warning with a count of reasons. Flags can't be browsed as a list, never show who made them, and are deleted 180 days after they're made. Removing your mark removes your flag. A copy of the listing id and reason, with nothing about who flagged it, is kept with the market data. Flagged listings are kept out of the price statistics.

The browser extension

Before it does anything, the extension asks you to agree to the terms and this policy. Until you do, it reads nothing and sends nothing.
It reads the Facebook Marketplace pages you open, including Marketplace listings opened from a Facebook post, inside your browser, to find vehicle listings and score them. It does not read messages, your profile, photos, or anything outside Marketplace vehicle listings.
The scores it shows are calculated in your browser using Carpool's public vehicle catalog.
Signed out, your lists, log, and settings (gas price, badges) are kept in your browser's extension storage. The first time you sign in, your lists and log are added to your account. Signing out, or signing in with a different account, clears the log stored in that browser, so one account's cars are never shown to another.
Cars you star or hide are remembered only in your browser.
It does not show ads or contain analytics.

What Carpool doesn't do

Sell your data, or share it with anyone except the service providers below.
Show your name or email to other users.
Use your data for advertising, or for anything other than running Carpool and studying used-car prices.

Service providers

Carpool runs on Vercel (hosting) and Neon (database). The website uses Google Analytics and Vercel Web Analytics to count page views. If you sign in with Google, Google confirms your identity; Carpool receives your name, email address, and profile picture.

Deleting your data

Delete lists from the site or the extension at any time, and clear your log from the extension. To delete your account and everything tied to it, email yorbelac@gmail.com from the address on the account. Market data isn't tied to your account, so it stays. Removing the extension deletes everything it stored in your browser.

Contact

Questions about this policy: yorbelac@gmail.com.