Privacy Policy

Last updated: 2026-06-02

This Privacy Policy describes how Vorsprung Garage ("we," "us," or "our") handles information in connection with the informational website at vorsprunggarage.com (the "Site"). The short version: we use one cookie-less, aggregate-only analytics service (Cloudflare Web Analytics) to count page views, we don't use marketing cookies, we don't sell or share information, and we don't reach out to you unless you contact us first.

1. Information We Do Not Collect

The Site does not include any of the following:

• Google Analytics, Meta Pixel, or any cookie-based or identifier-based visitor tracking. (See §4 for the cookie-less aggregate analytics we do use.)
• Advertising or retargeting cookies.
• Contact forms, newsletter sign-ups, or chat widgets that collect personal information.
• User accounts, logins, or profile data.
• Online payment processing.

Because the Site does not actively collect personal information beyond the aggregate, non-identifying metrics described in §4, there is no profile or user record kept on our end as a result of you visiting the Site.

2. Information We May Receive When You Contact Us

The Site lists a phone number, (909) 273-5159, that you may use to call or text, and an email address, info@vorsprunggarage.com. When you contact us through any of these channels:

• Your phone number, email address, and/or the contents of your message become known to us through your phone carrier, messaging app, or email provider.
• We use that information only to talk to you about the service or question you raised.
• We do not add your number or email to a marketing list, newsletter, automated outreach campaign, or shared contact database.
• If you become a customer, we may keep basic records (your name, vehicle details, work performed, amount paid) for tax, warranty, and recordkeeping purposes, consistent with normal business practice and applicable law.

3. Hosting and Server Logs

The Site is hosted by Firebase Hosting, a service provided by Google. As is standard for any web-hosting service, Firebase's servers automatically receive technical information with each request — including IP address, requested URL, timestamp, HTTP referrer, and user-agent string — for the purpose of delivering the page and protecting against abuse. We do not operate analytics on top of this data, and we do not maintain a separate copy of server logs. Google's handling of this data is governed by its own privacy policy. See: Firebase privacy and Google's Privacy Policy.

4. Cookies, Local Storage, and Cloudflare Web Analytics

The Site does not set its own cookies, does not use local storage to identify or track you, and does not embed advertising trackers or fingerprinting scripts.

The Site does load a small JavaScript beacon from Cloudflare Web Analytics (static.cloudflareinsights.com/beacon.min.js) so we can see basic, aggregate traffic information — for example, how many times the homepage was viewed in a week, which page was visited, the referring site, the visitor's country (derived from IP), and the type of browser and device. Cloudflare Web Analytics is cookie-less by design, does not use localStorage, does not assign you a persistent identifier, and is not used for cross-site tracking or advertising. The metrics we see are aggregate counts, not individual user profiles, and we have no way to tie a measurement back to a specific person.

Cloudflare receives the request that loads the beacon and processes the metrics on our behalf as a service provider / processor. Cloudflare states that it uses the IP address only momentarily to derive country-level location and connection metrics, and does not retain it or use it for advertising. For the full description of Cloudflare's processing, see Cloudflare Web Analytics and the Cloudflare Privacy Policy. If you prefer not to load the beacon at all, you can use a browser extension that blocks third-party scripts; the Site remains fully functional without it.

The fonts on the Site are loaded from Google Fonts; Google may receive a request from your browser for the font files. Google states that Google Fonts logs are not used for ad personalization. If you prefer to avoid that request, you can also block it with a browser extension.

5. External Links

The Site may link to external services — for example, a Google review page (g.page) — that have their own privacy practices. Following those links takes you to a separate service that we do not control. Please review their privacy policies for details on how they handle your data.

6. Children's Privacy

The Site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the Site, please contact us so we can address it.

7. Your Rights — California (CCPA / CPRA) and Other Jurisdictions

California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the rights to know, delete, correct, and (where applicable) limit the use of sensitive personal information, and to not be discriminated against for exercising those rights. Because we do not operate analytics, do not sell or share personal information for cross-context behavioral advertising, and only receive information you voluntarily provide by calling or texting us, the practical effect is limited — but you may still contact us at any time to ask what information, if any, we hold about you, or to request that it be deleted.

If you are in another jurisdiction (such as the EU/UK) and believe you have data-protection rights with respect to information you have shared with us, you may contact us by phone or text and we will respond reasonably.

8. Data Retention

For customers, we keep service-related records (vehicle, work performed, amount paid) for the period required by California law and ordinary tax recordkeeping. For non-customers who simply called or texted, we typically do not retain the conversation beyond what your own phone or messaging app keeps; we don't operate a CRM.

9. Security

The Site is served over HTTPS. We take reasonable steps to protect any information we do receive (for example, by limiting access to it). No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the current version took effect.

11. Contact

To ask a question about this policy or to make a privacy-related request, please call, text, or email using the contact information above and mention "privacy" so we can route the question appropriately.