Skip to main content
CrashStory
Live
Loading incidents...

Privacy Policy

Last updated: January 31, 2026

1. Information We Collect

CrashStory ("we," "our," or "us") collects information to provide you with Colorado car accident data and connect you with qualified attorneys. We collect the following categories of information:

A. Information You Provide

  • Account information: Name, email address, phone number, and password when you create an account.
  • Case submission details: Accident date, location, description, injuries, vehicle information, insurance details, and other case-related information when you submit a claim or use our case evaluation tools.
  • Contact form data: Name, email, phone number, and message content when you request a consultation or contact an attorney.
  • Attorney profile information: For lawyers who register on our platform: name, firm name, bar number, practice areas, contact information, and professional credentials.

B. Crash Data from Public Sources

  • We source crash data from publicly available records maintained by the Colorado Department of Transportation (CDOT). This data includes accident dates, locations, contributing factors, severity, and vehicle types. Personal identifying information of accident participants is not included in public CDOT records.

C. Automatically Collected Information

  • Usage data: Pages visited, search queries, features used, time spent on pages, and interaction patterns.
  • Device information: Browser type, operating system, device type, screen resolution, and language preferences.
  • Network information: IP address, referring URL, and general geographic location derived from IP address.
  • Location data: Approximate location if you enable browser location services for nearby accident search functionality.

2. How We Use Your Information

  • To provide accident search results and crash data visualizations from public CDOT records.
  • To connect you with personal injury attorneys based on your location, case details, and preferences.
  • To process case evaluations and provide estimated settlement values through our calculator tools.
  • To facilitate the attorney bidding system and lead distribution.
  • To improve our services, website functionality, and user experience through analytics.
  • To send service-related communications such as case status updates and bid notifications.
  • To send marketing communications only if you have opted in.
  • To detect and prevent fraud, abuse, and security threats.
  • To comply with legal obligations and protect our rights.

3. Information Sharing

We may share your information with the following parties:

  • Attorneys and law firms: When you request a consultation, submit a case, or when an attorney bids on your case through our platform, your contact information and case details are shared with the relevant attorney or law firm.
  • Service providers: Third-party tools that process data on our behalf, including:
    • Hosting and infrastructure (cloud providers)
    • Analytics services (Google Analytics, Plausible Analytics)
    • Payment processing (Stripe)
    • Email delivery (SendGrid)
    • Map and geocoding services
  • Legal requirements: When required by law, court order, subpoena, or to protect our rights, property, and safety.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties for marketing or advertising purposes.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: Required for site functionality, authentication, and security.
  • Analytics cookies: Used to understand how visitors interact with our site (via Plausible Analytics and/or Google Analytics).
  • Preference cookies: Remember your settings, recent searches, and display preferences.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality, including login and saved preferences.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • HTTPS/TLS encryption for all data in transit.
  • Encryption at rest for sensitive data stored in our databases.
  • Role-based access controls limiting who can access user data.
  • Regular security audits and vulnerability assessments.
  • Secure password hashing (bcrypt) for user accounts.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

  • Account data: Retained for as long as your account is active. After account deletion, data is purged within 30 days.
  • Case submissions: Retained for up to 7 years to comply with legal record-keeping requirements.
  • Analytics data: Aggregated and anonymized analytics data may be retained indefinitely. Personally identifiable analytics data is deleted within 26 months.
  • Public crash data: Retained as long as it remains available from CDOT sources and is relevant to our service.

7. Colorado Privacy Act Compliance

Under the Colorado Privacy Act (CPA), effective July 1, 2023, Colorado residents have specific privacy rights. CrashStory is committed to complying with the CPA and respecting your privacy rights:

  • Right to access: You may request a copy of the personal data we have collected about you.
  • Right to correction: You may request that we correct inaccurate personal data.
  • Right to deletion: You may request deletion of your personal data, subject to certain legal exceptions.
  • Right to data portability: You may request your data in a portable, machine-readable format.
  • Right to opt out: You may opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights, contact us at privacy@crashstory.com. We will respond to verified requests within 45 days as required by the CPA. You may appeal a denial by contacting us at the same address.

8. Your Rights

Regardless of your location, you have the right to:

  • Access the personal information we hold about you.
  • Request correction or deletion of your personal information.
  • Opt out of marketing communications at any time.
  • Request a copy of your data in a portable format.
  • Withdraw consent for data processing where consent was the basis.

To exercise these rights, contact us at privacy@crashstory.com.

9. Third-Party Services

Our platform integrates with the following third-party services, each with their own privacy policies:

  • Google Maps / Mapbox: For displaying crash locations and map-based search. Subject to Google/Mapbox privacy policies.
  • Stripe: For processing attorney subscription payments. CrashStory does not store credit card numbers directly.
  • SendGrid: For transactional email delivery.
  • Google Analytics / Plausible: For website analytics and usage tracking.

10. Children's Privacy

CrashStory is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may also notify you via email if you have an account.

12. Contact Us

If you have questions about this privacy policy, our data practices, or wish to exercise your privacy rights, contact us:

See also: Terms of Service