Your VIN is sent
only when you ask.

VINDECODE processes entered VINs in your browser. When you submit a single-vehicle lookup, the VIN and optional model year are sent to NHTSA’s public vPIC decoder. If NHTSA returns a make, model and year, the page requests general recall-campaign information using those decoded attributes. When you submit the comparison form, both VINs are sent to NHTSA vPIC so the site can build the side-by-side matrix.

For VIN-specific unrepaired recalls, the result offers a link to NHTSA. If you click it, the VIN is included in the destination URL so NHTSA can run that lookup.

VINDECODE does not save lookup or comparison history in local storage or require an account. The site code does not send VINs to an analytics or advertising service. The page currently requests typography files from Google Fonts. The site host, Google Fonts and NHTSA may process request data under their own policies; review their terms before submitting sensitive information.

“Copy share link” deliberately places the VIN and optional year in the URL. Anyone who receives that link can see the VIN. Share it only when you intend to.

VINDECODE does not provide a vehicle history report and cannot confirm title, owner, accident, theft, odometer, or repair status. Read about data sources and limits.

This page describes the current client-side implementation; hosting, analytics, or advertising configurations added later may require updates.