PickupIndex Privacy Policy

1. Nature of Our Service & Data Minimization

PickupIndex is an independent automotive data intelligence, specification normalization, and truck evaluation portal. We do not require user account registration, user logins, profile creation, or payment processing on our domain. We operate under strict principles of data minimization: we only process technical and telemetry information strictly required to operate, optimize, and secure the service.

Because we do not maintain consumer accounts or process financial transactions, we never collect or store consumer names, personal home addresses, credit scores, driver's license numbers, or payment card credentials.

2. Information Collected Automatically

When you access PickupIndex.com, certain technical telemetry is automatically gathered by our web infrastructure and analytics providers:

• Server Log & Edge Telemetry: IP address (anonymized/truncated), requested URL path, referring URL, browser user-agent, operating system, and request timestamp. This data is handled by our content delivery and security layer (Cloudflare) to detect abusive web scraping, mitigate denial-of-service attempts, enforce API rate limits, and ensure global cache performance.
• Google Analytics 4 (GA4): We utilize Google Analytics 4 to understand aggregate site traffic, popular catalog filter categories (such as Midsize vs. Full-Size 1500 trucks), session durations, and geographic engagement. GA4 processes truncated IP addresses and sets first-party analytical cookies (_ga, _ga_*) to distinguish unique visitors without collecting personally identifiable information (PII).
• Direct Inquiries: If you voluntarily reach out to us via email at contact@pickupindex.com, we collect your email address and any communications content solely to resolve your inquiry or data audit request.

3. Third-Party Technologies, Cookie Policy & Opt-Out Controls

Unlike traditional automotive shopping portals that rely on affiliate conversion networks, dealer lead brokers, and cross-site behavioral retargeting pixels:

Our utilization of cookies and browser storage is strictly limited to:

• Local Storage UI State: We store your preferred theme preference (pickupindex_theme: "light" or "dark") and temporary active catalog filter selections directly within your browser's local storage. This information never leaves your device and is never transmitted to our backend servers.
• Cloudflare Security Cookies: Cloudflare may deploy essential operational cookies strictly to verify legitimate human web traffic, detect automated malicious bot traffic, and manage edge security challenges.
• Aggregated Analytical Cookies: Google Analytics 4 sets first-party cookies (such as _ga and _gid) to measure aggregated audience trends. GA4 does not track personal vehicle buying records or link sessions across non-affiliated web properties.

How to Control and Opt-Out of Cookies

You retain full control over cookie storage. You can configure your browser to block, alert, or delete cookies at any time:

• Modify your cookie and site data settings in Chrome, Firefox, Safari, or Microsoft Edge under Privacy & Security.
• Opt out of participating digital advertising measurement networks via the Digital Advertising Alliance WebChoices Tool (US), the DAA of Canada YourAdChoices Tool (Canada), or the Network Advertising Initiative Opt-Out Tool.
• Install the official Google Analytics Opt-out Browser Add-on.

4. Data Sharing & Zero-Sale Commitment

We do not sell, rent, lease, or monetize your personal information or browsing data to car dealerships, auto brokerages, lead generation firms, or commercial data brokers.

Many automotive comparison websites collect consumer phone numbers and ZIP codes to sell them as "dealer sales leads" for commercial referral fees. PickupIndex rejects this model entirely. We never harvest or broker consumer leads.

We only transmit technical telemetry to trusted infrastructure processors operating under strict confidentiality and security commitments:

• Cloudflare, Inc.: Global CDN edge routing, DDoS mitigation, web application firewall (WAF) filtering, and SSL/TLS certificate termination.
• Google LLC: Aggregated anonymous web traffic telemetry via Google Analytics 4 with IP anonymization enabled.
• Legal Compliance: We will disclose server log telemetry only if strictly compelled by a lawful court order, subpoena, or governmental regulatory mandate.

5. Geographic Scope & Notice to International Visitors (EEA & UK)

Non-Targeting of European Consumers (GDPR Article 3(2)):
PickupIndex does not market, solicit, sell, lease, or export motor vehicles to individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, nor do we intentionally offer goods or services to data subjects in those jurisdictions. Consequently, pursuant to Article 3(2) of the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR / Data Protection Act 2018, PickupIndex is not subject to the statutory mandates or consumer rights frameworks of the GDPR.

Voluntary International Access & Data Transfers:
If you access this website from outside North America (including for automotive engineering evaluation, industry benchmarking, or technical research), you do so entirely on your own initiative. By browsing PickupIndex.com, you acknowledge and agree that:

• PickupIndex does not maintain user accounts, profiles, customer databases, or reservation records.
• Any technical, non-personal telemetry automatically generated during your session (such as anonymized IP routing via Cloudflare CDN and aggregated traffic statistics via Google Analytics 4) is transferred to and processed on secure servers located in the United States.
• To the extent any technical data is processed, it is handled strictly under our legitimate business interest (GDPR Article 6(1)(f)) of maintaining website stability, preventing automated scraping abuse, and securing network infrastructure.

International Inquiries:
If you have questions regarding our geographic scope or technical data handling, you may contact our compliance desk directly at contact@pickupindex.com.

6. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA), California residents are entitled to specific statutory disclosures:

• Categories of Personal Information Collected: Internet and electronic network activity information (truncated IP addresses, browser user-agents, referral URLs, interaction timestamps with our vehicle catalog and specification filters).
• Business Purpose: Maintaining platform integrity, debugging technical errors, measuring content engagement, and protecting network infrastructure.
• Do Not Sell or Share Personal Information: PickupIndex does not "sell" or "share" personal consumer information as defined under California law.
• Non-Discrimination: We will never discriminate against you, deny access, or degrade catalog performance for exercising your statutory CCPA rights.

California consumers may submit a verifiable consumer request by emailing our compliance administrator at contact@pickupindex.com.

7. Canadian Privacy Rights (PIPEDA & Provincial Legislation)

For residents of Canada, our handling of technical data complies with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (including Quebec Law 25, Alberta PIPA, and British Columbia PIPA):

• No Sensitive Personal Data Collection: PickupIndex does not collect, record, or store sensitive personal information, financing records, customer accounts, or vehicle purchase contracts.
• Implied Consent for Operational Telemetry: Under Canadian privacy principles, navigating PickupIndex signifies implied consent for the collection of anonymous technical telemetry (CDN edge routing and aggregated GA4 web statistics) necessary to deliver and secure our vehicle comparison services.
• Cookie & Measurement Management: Canadian visitors may withdraw consent or manage tracking preferences at any time via standard browser cookie controls or the Digital Advertising Alliance of Canada (DAAC) YourAdChoices Tool.

Canadian users with privacy inquiries or questions regarding telemetry handling may contact us directly at contact@pickupindex.com.

8. Data Security & Retention

We implement industry-standard technical measures to secure data transit, including mandatory HTTPS encryption with TLS 1.3, strict Content Security Policies, and automated Cloudflare edge firewall filtering to safeguard against malicious traffic and eavesdropping.

Standard web server access logs and telemetry are automatically purged or rotated within 30 to 90 days. Aggregated analytics reports in Google Analytics are retained in accordance with standard GA4 retention policies.

9. Children's Online Privacy Protection Act (COPPA)

PickupIndex.com is intended for general adult audiences, vehicle purchasers, and automotive fleet operators. We do not knowingly solicit, collect, or maintain personal information from children under the age of 13. If you believe a minor has submitted personal information to us, please notify us immediately for prompt deletion.

10. Privacy Inquiries & Data Protection Contact

For questions regarding this Privacy Policy, cookie disclosures, or data privacy requests, please contact our compliance administrator: