Privacy policy

Effective 2026-11-08. Applies to RecallLens (https://recalls.trystarrynightops.com), published by Starry Night.

What the connector receives

When Claude or another MCP client calls a RecallLens tool, our server receives the tool's arguments, such as a make, model and year, a VIN, keywords or dates, and uses them only to answer that request. We do not log or store these arguments or the answers. We do not receive your conversation, your name or your account details, and the tools do not ask for them.

What we count

We keep anonymous daily totals: how many times each tool was called (and how many calls ended in an error), how many times each page of this site was viewed, and the domain of the referring website in aggregate (for example "google.com"). These counts contain no IP addresses, no user identifiers, no search terms and no VINs. We do not use cookies, analytics scripts or advertising trackers.

What we send to government services

To answer a request, the server sends the needed search parameters to the public US government API that holds the data: NHTSA (api.nhtsa.gov and vpic.nhtsa.dot.gov), FDA's openFDA (api.fda.gov) or CPSC (saferproducts.gov). For VIN lookups, only the first 11 characters of the VIN (manufacturer, vehicle type, check digit, model year and plant codes) are sent, or the first 14 for low-volume manufacturers, whose VINs carry the manufacturer code in characters 12-14; the serial number never leaves our server. These agencies have their own privacy policies.

Caching

To keep load on the public APIs low, answers from those APIs are kept in Cloudflare's cache and refreshed after up to 12 hours for recall data and VIN lookups (VIN lookups are stored by the same 11- or 14-character VIN prefix that is sent to NHTSA, never the full VIN) and 7 days for NHTSA model lists. Cache entries are filed under a one-way hash of the request and expire automatically, within 90 days at most. An older cached copy is used only when a government service is down, and the answer then says so.

Support messages

If you use the support form, we store your message and, if you choose to give them, your name and a reply address, so we can answer you. We use them only for that, and delete them within 12 months. Please don't include sensitive personal information.

Hosting and third parties

RecallLens runs on Cloudflare (Workers, D1 database, cache). Cloudflare processes requests, including IP addresses, to deliver and protect the service, under Cloudflare's privacy policy. We do not sell or share data with anyone else, and we do not use Cloudflare's request logging for this service.

Retention

• Tool arguments and answers: not stored.
• Cached government data: expires automatically (see Caching).
• Anonymous daily counts: kept up to 24 months.
• Support messages: deleted within 12 months.

Children

RecallLens is not directed to children under 13 and does not knowingly collect their personal information.

Changes and contact

If this policy changes, we will update this page and its effective date. Questions or requests: use the support form.