This Privacy Policy is issued by v2stack ("we," "us") and covers Deal Sheet, a free, independent car-buying negotiation worksheet available at carbuying.v2stack.com. It is not a product or service of any automaker, dealership, or lender, and this policy does not apply to any other website you may reach by following a link from this one.
Deal Sheet asks you to enter figures like vehicle price, loan terms, fees, and trade-in details so it can calculate totals for you. This information:
We built it this way deliberately: there was no reason to route your negotiating numbers through a server when a browser can do the math on its own.
We do not use analytics scripts, advertising pixels, session recording tools, or any form of behavioral tracking. We do not require or offer account creation, so we hold no usernames, passwords, or email addresses. We do not use cookies of any kind — not for functionality, not for preferences, not for tracking.
Many websites load typefaces from Google's font CDN, which causes every visitor's browser to send its IP address to Google before the page even finishes loading — often without the visitor's knowledge. A German court found in 2022 that doing this without consent violates the GDPR, and that finding has continued to shape guidance through 2026.
Deal Sheet does not do this. Every font file used on this site is bundled and served from the same domain as the page itself. Loading this site does not cause your browser to contact Google, or any other third-party font, analytics, or advertising provider.
This is the one honest exception to "we collect nothing," and it applies to essentially every website on the internet: the infrastructure that serves these pages to your browser (our hosting provider) may automatically log basic technical information as part of normal web server operation — typically an IP address, browser/device type, the page requested, and a timestamp. This is standard request-logging that happens at the infrastructure level, not something Deal Sheet's own code collects, reads, or has access to. We do not layer any additional tracking on top of it, and we do not use it for analytics, profiling, or marketing.
Deal Sheet is not directed at children and is not knowingly used to collect information from anyone, of any age — because it does not collect information from anyone at all. If you believe a child has provided personal information through this site in some way we haven't anticipated, contact us using the details below and we'll look into it.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data held about you, or to object to certain processing. Because Deal Sheet does not collect or retain any personal data from your use of the tool, there is generally nothing for us to access, correct, or delete on our end. If you have a specific concern — including about the hosting-log point above — you're welcome to contact us and we'll respond honestly about what does or doesn't exist.
This site is accessible worldwide. Because no personal data is collected by the application itself, there is no cross-border transfer of your entered information to worry about. Standard hosting infrastructure (see Section 5) may be located in the United States or elsewhere depending on our hosting provider's setup.
If this policy changes — for example, if we ever add a feature that does process data, such as an optional cloud-save — we will update this page and change the effective date above. Given the tool's design, we don't expect frequent changes.
Questions about this policy can be directed to v2stack. If you're reading this on the deployed site, check the footer for current contact details, since this document doesn't hardcode an email address that could go stale.