Privacy policy
What we collect when you use Which EV Should I Buy?, why, who else receives it, and your choices.
Which EV Should I Buy? (the "site", at whichevshouldibuy.com) is published by CAM Software LLC, a Texas limited liability company ("we", "us"). This policy explains what information we collect when you use the site, why we collect it, who else receives it, and the choices you have.
The short version
- The quiz does not save your answers and does not send them to us. We record which question number you reached and, when you finish, which of the three result types you got (for example "Great fit"), never your answers.
- We also record which result cars you open, which tools you use (the comparison and the cost calculator) and which other websites you open from our links (by site name only), never what you type.
- The quiz asks which state you're in. Your browser uses it to fill in state averages. We don't store it or send it to our analytics.
- We never ask for or use your precise (GPS) location.
- By default we count visits without cookies. Our analytics (PostHog) stores no analytics identifier on your device and doesn't keep your IP address with our analytics data. It records your location only at the level of your state (or country outside the US).
- If you choose "Allow cookies", PostHog can recognize your browser when you come back, and we also use Google Analytics. You can change your mind at any time.
- In the EEA, the UK and Switzerland (and whenever we can't tell where you are), no analytics runs at all unless you agree.
- If you send us a message or a correction, we store what you type plus some technical details, to reply to you and to block spam.
- There are no ads on the site today. We may add advertising later. If we do, we will update this policy first.
- We don't sell your information, and we don't share it for targeted advertising.
1. Who we are
CAM Software LLC 17350 State Hwy 249, Ste 220 #17381, Houston, TX 77064, USA Email: evsupport@whichevshouldibuy.com
For visitors in the European Economic Area (EEA), the United Kingdom and Switzerland, CAM Software LLC is the "controller" of the personal data described here.
2. What we collect and why
2a. Information you give us: contact form and "report a correction" form
When you submit either form, we store the submission in our database (Supabase). We do not send it to anyone by email. We store:
- Your name (contact form, required) and your email address (required on the contact form, optional on the correction form if you want to hear back), so we can reply to you.
- The topic you choose on the contact form ("General question" or "Privacy request"), so privacy requests reach the right place.
- Your message, so we can read and act on it.
- The page the message is about. On the correction form you choose it; on the contact form we record the page on this site you came from, if any. This tells us what you are referring to.
- A source link, if you give one on the correction form, so we can check the correction.
- Your IP address, browser "user agent" and browser language setting, to detect and block spam and abuse (for example, limiting how many messages one address can send).
- Your country, as estimated by our host from your IP address, to detect spam and to know where messages come from.
- How you reached the form: the site that referred you, the first page you visited on this site, the page you sent the form from, and any campaign tags in the link (UTM parameters). This shows us how people find the site and which pages lead to questions.
- Your analytics ID (the random PostHog identifier described in 2c), to connect your message to the pages you viewed, for spam detection and to see which pages lead to questions. By default this covers only the visit in which you sent the form; if you chose "Allow cookies", it can cover earlier visits from the same browser.
Please don't put sensitive information (health, financial account numbers and so on) in a message.
2b. Information the quiz and tools use
- Quiz answers are processed in your browser to pick cars. They are not saved and not sent to us. As you go, we record which question number you reached (for example "question 5 of 13"). When you finish, we record a "quiz completed" event with only the result type you got (one of our three outcomes). Neither ever includes your answers.
- Your state. When you tell the quiz which state you're in, your browser uses it to fill in that state's average electricity price. We don't store it and don't send it to our analytics.
- "Copy link to results" builds a link that contains your answers, so that opening it rebuilds the same results. The answers are in the part of the link after the
#, which your browser does not send to our servers, and our analytics removes that part of the address before recording a page view. Anyone you share the link with can see the answers it contains. - No precise location. We never request your device's GPS or precise location.
2c. Analytics
We use analytics to understand which pages and tools are used, so we can improve the guides. How it works depends on your choice.
By default: cookieless mode (you haven't chosen "Allow cookies", or you chose "Stay anonymous"). In this mode we store no analytics identifier on your device (only your choice itself, see section 3), don't keep your IP address and can't recognize your next visit. Your visit is still counted, as described here.
- We use PostHog only. It records pages you view, the site that referred you, campaign tags in the link, general device and browser information (for example browser, operating system, screen size and language), and the events listed below.
- PostHog gives your visit a random identifier that is held only in the page's memory. Nothing is stored on your device: no cookies and no local storage. The identifier is gone when you close the tab or reload the page, so we can't tell if you come back.
- PostHog receives your IP address with each request, because that is how the internet works. PostHog uses it to estimate your location (and may use it to screen out automated traffic), then discards it instead of saving it with our analytics data. The location we keep is your US state (or your country outside the US), not your city.
- We never send your name or email to PostHog, and PostHog does not create a person profile for you. If you send us a form, we store your analytics ID with your message (see 2a), which lets us see the pages you viewed. We delete that ID from the form record after 90 days.
- Google Analytics does not run.
If you choose "Allow cookies":
- PostHog stores its random identifier in a first-party cookie (for up to 365 days) and in your browser's local storage (until you clear it or switch back to cookieless mode), and may also use your browser's session storage for the current visit. This lets us see return visits (for example, reading a guide on Monday and taking the quiz on Thursday). Everything else above stays the same: your IP address is still not kept with our analytics data and location is still state-level.
- We also load Google Analytics 4. It collects similar information (pages viewed, device, approximate location, and a random identifier stored in cookies). Google says that in Google Analytics 4 "IP addresses are not logged or stored"; Google uses your IP address to estimate your approximate location. We have turned off Google Signals, have not linked Google Analytics to any advertising product, and keep event-level data for 14 months. Learn how Google uses this information at How Google uses information from sites or apps that use its services. You can also opt out of Google Analytics on every site with Google's browser add-on.
In every mode:
- The events we record are page views and page leaves, plus which quiz question you reached, which result cars you open, which tools you use, and which other websites you open, never your answers or what you type. In detail:
- Quiz events: that you started the quiz, the number of each question you reached, and "quiz completed" with the result type only.
- Results events: when you open a car from your results, which car model it is (one of our public car pages), its place in your results, and whether it was one of your top picks or in the longer list. The cars and their places are the ranking our quiz produced from your answers, so across many visitors this shows which cars people's answers lead to. It never includes the answers themselves.
- Tools events: when a side-by-side comparison opens, how many cars it has; and that you used the cost calculator, without the numbers you entered or the result.
- Source-link events: when you open any link to another website, we record only its site name (for example "www.fueleconomy.gov"), never the address of the page.
- Form events: when a contact or correction form is viewed or submitted (for the contact form, the topic you chose, never what you typed).
- If you choose "Allow cookies", these same events, with the same details, also go to Google Analytics. We have turned off Google Analytics' automatic "enhanced measurement" (outbound clicks, scrolling, site search, form interactions, video and file downloads). Google Analytics records page views, the visit and engagement counts it always keeps (such as the start of a visit), and the events above.
- Apart from opening a result car or another website, neither PostHog nor Google Analytics records your clicks, and neither records the address of a page on another site you open, what you type, or the text of the buttons you press.
- Session recording: we do not record sessions.
- PostHog processes this data for us as our service provider, under its data processing agreement with us.
2d. Advertising
There are no ads on the site today. We may add advertising later to pay for the site. Before any ads appear, we will update this policy to say who serves them and what they collect, change the effective date at the top, and give you the choices the law requires.
Advertisers will never have a say in what we write or recommend. See our Editorial Policy & Independence.
2e. Information collected automatically by our hosting
Our host, Vercel, receives your IP address, browser user agent and the address of the page you request whenever your browser loads the site, as part of normal web serving and security logging. Vercel also tells the site which country you're in (estimated from your IP address), so we can decide whether to ask for your consent before any analytics runs (see section 6). We don't store it, except as part of a form submission (see 2a).
3. Cookies and similar technologies
"Local storage" is a small store in your browser, similar to a cookie, that only this site can read.
wev_privacy_choices(local storage, set by us) remembers your privacy choices: "Allow cookies" or "Stay anonymous", your consent choice in the EEA/UK/CH, and "Do Not Sell or Share". It holds no identifier. It is set when you make a choice, because it is needed to respect that choice, and it stays until you clear it.theme(local storage, set by us) remembers light or dark mode. It is set when you switch modes and stays until you clear it.- PostHog analytics storage (only if you choose "Allow cookies", or consent in the EEA/UK/CH): the
ph_phc_…_posthogcookie and local storage entry (the name includes our PostHog project key), plus other entries startingph_or__ph_, which may include session storage. They recognize your browser on return visits and remember whether analytics is allowed. The cookie lasts up to 365 days; local storage lasts until you clear it or switch back to cookieless mode; session storage lasts until you close the tab. - Google Analytics cookies
_gaand_ga_<ID>(only if you choose "Allow cookies", or consent in the EEA/UK/CH) tell browsers apart and keep track of a visit. They last up to 2 years.
If you chose "Allow cookies" and later change your mind, we remove the PostHog and Google Analytics cookies and storage entries we can reach and go back to cookieless mode. You can also block or delete cookies and local storage in your browser. The quiz and every page work without them.
4. Who receives your information
We don't sell your information. We share it only with:
- Service providers that run the site for us: Vercel (hosting), Supabase (database for form submissions), PostHog (analytics) and, only if you choose "Allow cookies", Google (Google Analytics). They may use it only to provide their service to us and to keep their services secure and working.
- Legal and safety reasons: if the law requires it, or to protect our rights, the safety of others, or to investigate fraud or abuse.
- If the business changes hands: if CAM Software LLC sells or transfers the site, the information goes with it, and this policy continues to apply to it.
5. How long we keep it
- Form messages (name, email, topic, message, page, source link): 24 months after we last reply or act on it, then deleted. When we fix something, our public corrections log records what we changed and when. It never includes your name, email or other details that identify you, and we don't quote your message unless you agree.
- Technical fields on form submissions (IP address, user agent, browser language, country, referrer, first page visited, page you sent the form from, UTM parameters, analytics ID): 90 days, then deleted from the record. The message itself stays for the period above.
- Submissions we identify as spam: up to 30 days, then deleted.
- PostHog events: kept for 1 year under PostHog's free plan, after which PostHog may delete them. If our plan changes, we'll update this page. They contain no IP address.
- Google Analytics events (only if you chose "Allow cookies"): 14 months for event-level data. Google keeps totals in standard reports (for example, visits per month) that no longer relate to a single browser.
- Hosting logs (Vercel): 1 day, the log retention of Vercel's Pro plan, per Vercel's runtime-logs documentation (checked 2026-09-30). If we upgrade to a plan with longer log retention, we'll update this page. Vercel may keep some request data longer for its own security and billing purposes under its own privacy policy.
6. Your choices
- Allow cookies or stay cookieless (US and most other countries): a small notice at the bottom of the page offers "Allow cookies" and "Stay anonymous". Ignoring it is the same as "Stay anonymous" (cookieless mode). You can change your choice at any time through the "Privacy · Do Not Sell or Share" link in the footer.
- EEA, UK and Switzerland: no analytics runs, in any mode, until you agree in the consent message. Agreeing turns on both PostHog and Google Analytics, with cookies (if your browser sends GPC, agreeing turns on PostHog in cookieless mode only, and Google Analytics stays off). Declining never blocks the quiz or any page, and you can change your choice at any time through the "Privacy · Do Not Sell or Share" link in the footer. If we can't tell which country you're in, we treat you the same way and ask first.
- Global Privacy Control (GPC): if your browser sends a GPC signal, analytics never goes beyond cookieless mode for that browser: we store no analytics identifier on your device (only your choice itself), and Google Analytics does not run. In the EEA, the UK and Switzerland, analytics stays off until you agree, as above. We also treat it as a request to opt out of any sale or sharing of your personal information. We apply it automatically; you don't need to click anything.
- "Do Not Sell or Share My Personal Information": we don't sell or share personal information today. The control on the "Privacy · Do Not Sell or Share" page records your choice anyway, and we will honor it if we add advertising.
- Do Not Track: browsers' older "Do Not Track" setting has no agreed standard, and we do not change what we collect when we receive it. We honor GPC instead, as described above.
- Cookies: you can block or delete cookies and local storage in your browser. The quiz and every page work without them.
7. Your privacy rights
US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate personal information;
- delete personal information we hold about you;
- opt out of the "sale" or "sharing" of your personal information, or its use for targeted advertising (we do neither today; see "Your choices");
- not be treated differently for using any of these rights.
We honor these requests from any US visitor, whether or not a particular state's law applies to us.
California notice. We collect: identifiers (name, email address, IP address and a random analytics ID); internet activity (pages viewed, referrer, campaign tags, the events listed in 2c); approximate location (country and US state, estimated from your IP address); and the content of messages you send us. Sources: you, your browser, and our hosting and analytics providers. Purposes: replying to you, operating and securing the site (including blocking spam), and analytics. We disclose these categories for business purposes to our service providers: Vercel (identifiers, internet activity, location), Supabase (identifiers, message content), PostHog (analytics ID, internet activity, location) and Google (the same, only if you allow cookies). We have not sold or "shared" (as California law defines that word) personal information. We do not use or disclose sensitive personal information. We do not knowingly sell or share the personal information of consumers under 16.
How to make a request. Email evsupport@whichevshouldibuy.com with the subject "Privacy request", or use the contact form and choose "Privacy request". Tell us what you want us to do. We can find form submissions using the email address you used. Because we don't have accounts and our analytics doesn't store names, emails or IP addresses, we usually can't link analytics data to you. The exception is a form you sent us in the last 90 days: its analytics ID lets us find the analytics from that visit (and from earlier visits, if you allowed cookies), give you a copy, and ask PostHog to delete it where its tools allow. Switching back to cookieless mode or clearing your cookies stops future visits being linked to past ones, but it does not remove data PostHog already holds. We respond within 45 days. If we need more time, we'll tell you why within that period and may take up to 45 more days. You may use an authorized agent; we may ask the agent for proof that you authorized them. If we deny a request, you can appeal by replying to our decision with the subject "Appeal", and we will respond within 45 days. If we deny your appeal, you can complain to your state's attorney general (in Texas: texasattorneygeneral.gov/consumer-protection).
EEA, UK and Swiss visitors. Our legal bases are: your consent for analytics (nothing runs until you give it); our legitimate interests in operating and securing the site, answering messages and preventing spam; and legal obligations. You have the right to access, correct, delete, restrict or object to our processing, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. Your information is processed in the United States. Where a transfer safeguard is required, our providers rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on standard contractual clauses in their data processing terms. We don't make decisions about you based only on automated processing that have legal or similarly significant effects: the quiz suggests cars and decides nothing about you. Your name and email are needed only if you want a reply.
8. Security
We use reputable providers, encrypted connections (HTTPS) and restricted access to form submissions. No method of transmission or storage is completely secure.
9. Children
The site is for adults researching a car purchase. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.
10. Links to other sites
We link to automakers, government sites and other sources. Their privacy practices are their own.
11. Changes to this policy
When we change this policy, we post the new version here and update the effective date at the top. If a change materially affects how we use information we already hold, we will also show a notice on the site for at least 30 days before the change applies to that information.
12. Contact
CAM Software LLC · 17350 State Hwy 249, Ste 220 #17381, Houston, TX 77064 · evsupport@whichevshouldibuy.com