← Back to Home

Privacy Policy

Last Updated: February 2026

The Short Version

Your dashboard photos and VIN go directly to Groq AI. We never see your vehicle data. DashOrNOT uses a Bring Your Own Key (BYOK) architecture. Your phone talks directly to the AI provider (Groq). There is no DashOrNOT server — just static code hosted on Cloudflare's CDN. We have no database, no user accounts, and no way to see what you scan.

How DashOrNOT Works

Understanding our architecture is the best way to understand our privacy. Here's exactly what happens when you use DashOrNOT:

Your Phone → Groq AI (api.groq.com) → Your Phone
Your Phone → DashOrNOT Servers → Groq
  1. You provide your own free Groq API key (from console.groq.com/keys) for AI-powered scanning
  2. Your browser captures an image of your dashboard using your phone's camera
  3. Your browser sends the image directly to Groq's API at api.groq.com using your personal API key to identify the warning lights
  4. If you enter a VIN, it is sent directly to Groq for vehicle-specific diagnosis — we never see it
  5. Your browser displays the diagnosis results locally

There is no DashOrNOT server. The website is a static page hosted on Cloudflare's CDN — it delivers the code that runs in your browser, and that's it. No backend, no API, no database.

What We Collect

Data Type Collected? Details
Dashboard photos No Sent directly from your browser to Groq. We never receive them.
VIN numbers No Sent directly from your browser to Groq. We never see them.
Diagnosis results No Returned from Groq directly to your browser. We never see them.
API keys No Stored in your browser's local storage only. Sent only to Groq.
Vehicle information No All vehicle data stays between your browser and Groq.
User accounts No There are no accounts. No login, no registration, no email.
Usage analytics No No tracking pixels, no analytics scripts, no cookies.

Your API Key

Your Groq API key is stored exclusively in your browser's local storage — the same mechanism websites use to remember your preferences. It is:

Third-Party Services

Groq (AI Provider)

When you scan your dashboard or run a diagnosis, your browser sends data directly to Groq's API. This is governed by your own relationship with Groq — you signed up for your own API key and agreed to their terms. Groq's privacy policy applies to how they handle your API requests.

DashOrNOT has no partnership, data-sharing agreement, or business relationship with Groq. You use their API independently.

Cloudflare (Hosting)

DashOrNOT is hosted on Cloudflare Pages. When you load the site, Cloudflare's CDN serves the static files. Like any CDN, Cloudflare may log basic access data (IP address, page requested, timestamp) as part of normal operations. This is standard web infrastructure — Cloudflare does not receive any dashboard photos, VINs, API keys, or diagnosis results. Those go directly from your browser to Groq.

Google Fonts

We use Google Fonts for typography. Google may collect basic connection data (IP address) when fonts are loaded. No personal information is shared.

Verify It Yourself

We encourage you to verify our privacy claims independently. Here's how:

  1. Open DashOrNOT in your browser
  2. Open Developer Tools (F12 or right-click → Inspect)
  3. Go to the Network tab
  4. Scan your dashboard
  5. Look at every network request — you'll see requests only to api.groq.com and fonts.googleapis.com

If you see any request going to a DashOrNOT server with scan data, please report it — because that would be a bug, not a feature.

Data Breaches

In the event of a data breach, your scan data would not be affected because we don't have it. There is no database to breach, no dashboard photos to leak, and no user records to expose. The only thing hosted is the static website code itself — on Cloudflare's CDN, not a private server.

Children's Privacy

DashOrNOT does not knowingly collect any data from anyone, including children. Since no personal data is collected or stored anywhere, COPPA compliance is inherent to our architecture.

Changes to This Policy

If we change our architecture in a way that affects data flow (for example, if we ever add a backend server or route data through any server we control), we will update this policy prominently and clearly explain what changed and why.

Contact Us

Questions about privacy? Reach out:

The Bottom Line

We can't sell what we don't have. We can't leak what we don't store. We can't share what we never see. That's not a promise — it's our architecture.