Limited data for accounts, security, and reliable operation.

When you register, we store your email address, its normalized form, account status, creation time, and recent sign-in time. The email remains unverified because we do not currently send verification or recovery email.

Accounts must not be used for sensitive information, payments, loan applications, or administrative access. The six-digit image code resists automated attempts; it does not prove email ownership.

We never store the password itself. We store a randomly salted, versioned Node.js scrypt hash, password update time, hashed verification answers, hashed browser bindings, and keyed hashes used for network and email rate limits.

Random session tokens are stored only as SHA-256 hashes and expire after 30 days unless revoked earlier. Changing a password increments the account authentication version, revokes older sessions, and creates a replacement session for the browser completing the change.

The site does not ask for names, phone numbers, Social Security numbers, income documents, or loan applications. Calculator values stay in browser memory and are not intentionally transmitted to or stored by Auto Loan Guide.

Necessary cookies support authentication, bind verification images to a browser, and remember acknowledgement of the Cookie Notice. We do not currently use advertising, analytics, affiliate-tracking, personalization, or cross-site tracking cookies. See the Cookie Policy for names and retention periods.

Hosting infrastructure may process request time, requested URL, browser type, network address, and error diagnostics for security and reliability. Authentication logs must not contain passwords, password hashes, verification answers, session tokens, authentication secrets, or full email addresses.

Failed authentication records are retained temporarily for rate limiting. Expired challenges, sessions, and failure records are cleaned up opportunistically.

Official lender and source links lead to independent third parties with their own privacy practices. Review those policies before entering personal or financial information.

For privacy questions, contact emily@altras.ai. Material policy changes will receive a new effective date on this page.