Privacy Policy
Last reviewed Reviewed by Michael Ecke, Founder & Editor
CarSavr.com ("CarSavr," "we," "us," or "our") is owned and operated by Ecke National Holdings, LLC, a U.S.-registered company. We take your privacy seriously. This Privacy Policy explains what information we collect, how we use and protect it, how we share it with third parties, and the choices available to you when you use carsavr.com (the "Site").
By using the Site, you consent to the practices described below. If you do not agree, please discontinue use of the Site.
1. Information we collect
Information you provide directly:
- ZIP code, email address, and any optional details you submit through our quote-comparison forms, calculators, or newsletter signup.
- Messages, feedback, and any other information you provide when contacting us by email or our contact form.
Information collected automatically:
- Standard server log data including IP address, device and browser type, operating system, pages visited, referring URL, and timestamps.
- Analytics data collected via cookies and similar technologies (currently provided by PostHog) used to measure engagement and improve site performance.
- Affiliate tracking parameters when you click an outbound partner link — these may include a unique referral identifier that lets the partner attribute a resulting conversion to CarSavr.
2. How we use your information
- To connect you with relevant offers from third-party affiliate partners (insurers and lenders) when you initiate a quote comparison.
- To deliver newsletter or rate-alert content you have explicitly opted into.
- To operate, secure, debug, analyze, and improve the Site and our products.
- To respond to your questions, feedback, or support requests.
- To comply with applicable laws, enforce our Terms, and protect against fraud or abuse.
3. Sharing with affiliate partners
When you submit a quote-comparison form on the Site, the limited information you provide (such as ZIP code and, if you choose, email) may be shared with our vetted affiliate partners so they can present relevant offers. We provide only the data necessary to fulfill your request — never your browsing history or unrelated personal details.
We do not sell your personal information to advertisers, data brokers, or any party outside this opt-in comparison flow.
4. Affiliate disclosure
CarSavr is a participant in affiliate marketing programs. We may earn a referral commission when you click a partner offer or complete an action with a partner (such as opening an account or requesting a quote). This compensation helps fund our free tools and editorial coverage but never determines which offers we feature, where they appear, or how we rank them.
5. Cookies & analytics
We use first-party and third-party cookies, pixel tags, and similar technologies to remember your preferences, measure aggregate site usage, and improve performance. We do not use cookies for cross-site advertising profiling.
Your choices: CarSavr asks for your consent on first visit via a cookie banner with three categories:
- Essential — required for the site to work (login, saved comparisons, CSRF protection, accessibility preferences). Cannot be turned off.
- Analytics — anonymized usage data via PostHog and Google Analytics 4. Off by default until you accept.
- Marketing — reserved for future remarketing / conversion pixels. Currently no marketing trackers ship on the site; the toggle exists so we never re-prompt you when our stack changes.
You can change your consent at any time via the Cookie Settings link in the page footer (re-prompts the banner), or by clearing your browser cookies/localStorage. Our Google Analytics integration honors Consent Mode v2 — when analytics consent is denied, GA4 stops storing identifiers and only fires anonymized cookieless pings.
Cookie inventory
The cookies we ship today, by category:
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| session_token | CarSavr | Authenticated admin session (HttpOnly, Secure) | 30 days | Essential |
| carsavr_cookie_consent_v1 | CarSavr | Remember consent choice across visits | 12 months | Essential |
| carsavr_attribution | CarSavr | First-touch UTM attribution (localStorage) | 90 days | Essential |
| ph_* | PostHog (US) | Anonymous product-usage analytics | 12 months | Analytics |
| _ga, _ga_* | Google (Consent Mode v2) | Aggregate site analytics | 24 months | Analytics |
Marketing cookies: none currently ship. The Marketing consent toggle exists so future remarketing or conversion pixels (if added) will respect your prior choice. We will update this inventory before any marketing cookie is enabled.
6. Not financial, legal, or tax advice
Information on the Site — including calculators, rate comparisons, editorial commentary, and FAQs — is provided for educational and informational purposes only. It is not financial, legal, insurance, or tax advice. Always consult a qualified professional before making decisions based on Site content.
6.1 Data retention schedule
| Data category | Retention window | Reason |
|---|---|---|
| Quote-request + intake data | 24 months | Fraud investigation, conversion-attribution analysis. Anonymised thereafter. |
| Newsletter subscribers | Duration of subscription + 90 days | Unsubscribe-suppression list to honor opt-outs after deletion. |
| Contact-form messages | 36 months | Support history + reference across multi-message threads. |
| Server logs | 30 days | Operational debugging + abuse investigation. |
| Affiliate-click logs | 24 months | Commission-reconciliation + partner-postback dispute resolution. |
| Do-Not-Sell opt-out requests | 5 years | CPRA compliance audit trail. |
| Aggregated / anonymised analytics | Indefinite | No longer personal information; retained for editorial planning. |
You may request deletion of personal information before these windows expire by emailing hello@carsavr.com or using the Do-Not-Sell form. Legal-hold and tax-record obligations may extend retention in narrow circumstances; those exceptions are noted on the deletion-response confirmation.
6.2 Sub-processors
We share limited personal information with the following categories of sub-processors to operate the Site. Each is bound by a written contract (DPA or equivalent) limiting use to the purposes described in Section 3.
- Affiliate-network operators — Bankrate, LendingTree, Even Financial, Credible, MoneyLion (and similar). Receive ZIP + (when you choose to submit it) email + category-specific intake fields when you initiate a quote-comparison flow.
- Transactional email provider — Resend. Receives the email address + first name to deliver newsletter, rate-alert, and account-related messages. Reseller of AWS SES (SOC 2 Type II).
- Product analytics — PostHog (when "Analytics" is allowed in the cookie banner). Receives page-path + event names + anonymised session ID. No email or quote-form payload is sent.
- Cloud infrastructure — Emergent (the platform that hosts CarSavr) + the underlying database provider. Processes data at-rest for storage; staff access is gated by SOC 2 controls.
For an up-to-date list of named sub-processors at any point in time, email hello@carsavr.com with subject "Sub-processor list request." We respond within 14 days.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of the personal information we hold about you, and to withdraw any consent previously given. To exercise these rights, email hello@carsavr.com from the email address associated with your data. We will respond within the timeframe required by applicable law.
California residents: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you may request disclosure of the categories of personal information we collect, request deletion, and opt out of any sale or sharing of personal information. CarSavr does not sell personal information. To exercise your right to opt out of any sharing, use the interactive Do-Not-Sell form (preferred), email hello@carsavr.com from the email address associated with your CarSavr activity, or use our contact page.
EU / EEA / UK residents: If you are in the European Economic Area, United Kingdom, or Switzerland, the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 give you the right to (a) access the personal data we hold about you, (b) request rectification of inaccurate data, (c) request erasure ("right to be forgotten") subject to legal-retention exceptions, (d) restrict or object to processing, (e) data portability in a structured machine-readable format, and (f) withdraw any previously granted consent at any time. The lawful bases on which we process your data are (i) consent (newsletter, optional analytics cookies), (ii) legitimate interests (operational logging, fraud prevention, affiliate-attribution accounting), and (iii) contract performance (delivering the quote-comparison flow you have initiated). To exercise any GDPR right or to file a complaint with our Data Protection contact, email hello@carsavr.com. You may also lodge a complaint with your local Supervisory Authority (in the UK: the Information Commissioner's Office; in the EU: your member-state DPA).
8. Children's privacy
The Site is intended for U.S. adults age 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can delete it.
9. Security
We use industry-standard safeguards — including encryption in transit (TLS), access controls, and regular monitoring — to protect personal information. No internet-based service can be guaranteed 100% secure, and we cannot warrant absolute security.
10. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated "Last updated" date at the top of this page and, when material changes occur, take reasonable steps to notify you.
11. Data breach notification
If we become aware of an unauthorized acquisition, access, use, or disclosure of personal information we hold, we will notify affected users within the timeframe required by applicable law — typically within 30 to 72 hours of confirmation. Notification will be sent to the email address on file and, where required by law, will also be published as a public notice on this page. We maintain an incident-response runbook and review it at least annually.
12. Contact
Privacy questions or requests? Email hello@carsavr.com or use our contact page. Mail directed to Ecke National Holdings, LLC, the operator of CarSavr.com, will reach the same team.