Built so we can't expose you

What we collect when you write a review

• Your email — hashed, never stored raw. We use your email once to send a verification link. What we keep is a one-way cryptographic hash (HMAC-SHA256 with a secret server key). It lets us detect duplicate reviews and rate-limit abuse, but it cannot be reversed into your address, is never displayed, and is never shared with companies or anyone else.
• Your IP address — also hashed, used only for rate limiting.
• What you choose to display: current/former status, role, state, and year. That is the entirety of a review's public identity — for example, "Former closer · Wisconsin · 2025."

What we never do

• Display, sell, rent, or share reviewer emails or identities — we don't have usable ones.
• Tell a company anything about who reviewed them.
• Require an account to read or write reviews.
• Run third-party ad trackers on review pages.

Reading the site

Reading requires no account and no personal information. Standard server logs (IP address, user agent) are retained briefly by our hosting providers for security and abuse prevention, then discarded.

Company claims

When a company representative claims a page, we verify an email at the company's own domain. The address is stored hashed, like reviewer emails; the domain itself is kept to validate the claim.

Service providers

The site runs on infrastructure providers (hosting, database, and email delivery) that process data on our behalf under their own security commitments. Verification emails are handed to our email provider for delivery and are not otherwise stored.

Legal process

Because we store only one-way hashes, we cannot produce reviewer email addresses in response to demands — including subpoenas seeking to unmask reviewers. We will resist improper attempts to identify reviewers to the fullest extent the law allows.

Contact

Privacy questions or requests: contact@d2ddealerreview.com

Last updated: August 2026