LeaseCheetah

Privacy policy

Last updated October 10, 2026

LeaseCheetah is a browse-without-an-account site: you can use everything on it without giving us any personal information. This page describes the situations where data is involved — the optional deal-alert signup, asking for help with a specific lease, using the site through an AI assistant, and advertising — in plain language.

What we collect, and why

  • Deal-alert signups. If you use the signup form on the home page, a brand page or a guide, we store what you enter: your name, email address, and optionally the brand and model you're watching. We use it for exactly one thing — emailing you about lease deals per the consent on the form. Every email includes a way to unsubscribe, and unsubscribing stops all of it. We don't sell or rent this information to anyone.
  • Working out which market you're in. Lease offers are priced by region, so a model page has to pick one. On arrival it asks service.poolnear.me, a service we run, roughly where your internet connection is — city-level, from your IP address. We use the answer for one thing: choosing the nearest market whose prices to show you. We don’t store it, it never reaches the signup form unless you type it there yourself, and the page says which market it picked so you can correct it with the ZIP box. Block the script, or use a VPN, and the page falls back to a default market and still works. If you do correct it, your browser remembers that ZIP for the rest of the tab so you don’t have to retype it on every car you look at. It is kept in the tab’s own session storage, never sent to us, gone when you close the tab, and not shared with any other tab or any later visit. What we guessed from your IP address is still never stored anywhere.
  • Help with a specific lease. On an individual offer page you can ask us to help you get that lease from a dealer. That form collects your name, email address and ZIP code, optionally a phone number, and the vehicle you're asking about. Because the point of it is an introduction, we pass those details to a motor dealer in your area so they can contact you about that lease — by email, and by phone if you gave us a number. The form's button says so ("Send my request to [dealer] and let them reach me through LeaseCheetah"), and we don't do it unless you press it. We don't charge you, the dealer is not us, and we can't control what they offer you.
  • Deleting all of it, whenever you want. Every dealer introduction comes with a link that retires the forwarding address and the phone number a dealer was given, and removes your name, email address and phone number from our records. It works at any time and needs no account. One thing survives it, and it is not about you: whether a dealer ever replied. That is our record of how dealers behave, kept with nothing attached that identifies the person they were replying to.
  • The forwarding address. When we make that introduction we give the dealer an address at email.leasecheetah.com that forwards to you, rather than your own address. It exists for two reasons: the dealer never gets your real email address, and we can tell a dealer who worked a lead from one who ignored it. What that means, stated plainly. The conversation passes through us in both directions. The dealer's emails reach you through that address. When you reply, your reply comes back through us and goes on to the dealer from the same address, so they never see your own. Every message that passes through is stored, and deleted after 180 days. We use the dealer's messages to know whether, and how quickly, they replied. We don't read your replies; the one exception is a message the relay can't safely send on by itself (for example, a reply sent from a different email address than the one you gave us), which goes to a person at LeaseCheetah instead of the dealer. Switching the address off ends it both ways. If you'd rather deal with the dealer directly, you can contact them yourself: the dealer's name and location are on the page you sent the request from, and their emails to you will usually include their contact details.
  • Changing your mind. Email hello@leasecheetah.com and we'll delete your details, switch off the forwarding address and stop passing them on. We can't un-send an introduction already made, so tell the dealer directly if you'd rather they didn't contact you.
  • Analytics. We use two analytics services to see how the site is used. Ahrefs Analytics counts page views in aggregate; it sets no cookies and builds no profile of you. Google Analytics sets its own cookies (named _ga and _ga_…) and sends Google the pages you view, how you arrived, your browser and device type, and an approximate location Google works out from your IP address. We look at it only in aggregate, we don’t connect it to anything you give us, and we don’t turn on Google’s advertising features. It isn’t loaded on the page that deletes a dealer request. You can block it with your browser’s cookie settings, a content blocker, or Google’s opt-out add-on, and the site works exactly the same.
  • Telling us a page was useful, or wasn’t. Most pages show a small “Was this page useful?” box once you have read a little of the page. If you answer it we store your thumbs up or down, which page you were on, any of the three reasons you tick, and whatever you type in the comment box — and nothing else. There is no name, no address and no identifier of any kind attached, which is the point of it and also its one limitation: we cannot find and delete “your” feedback later, because nothing in it points back to you. Please don’t type anything into that box you would not want stored unattributed. Ignore the box and nothing is sent.

Signup data is stored in our database, hosted on Supabase's cloud infrastructure in the United States. To have your signup data corrected or deleted, email hello@leasecheetah.com from the address you signed up with and we'll take care of it.

Using LeaseCheetah through an AI assistant

LeaseCheetah runs an MCP server at mcp.leasecheetah.com, which lets an AI assistant look up lease offers, check a dealer’s quote for you, and list the dealers near you. Looking things up needs no account, and answers come from a snapshot of the same published offer data the website shows.

The assistant never collects your details for us. None of its tools takes a name, email address or phone number, and nothing you say to the assistant reaches a dealer through us. If you want help getting a particular lease, the assistant gives you the link to that car’s page on leasecheetah.com, and the form there works exactly as described under “Help with a specific lease” above. The assistant’s provider handles your conversation, including anything you type into it, under its own privacy policy.

Signing in, or not. Most assistants (ChatGPT, for one) connect without a sign-in. Some (Meta’s Muse, for one) will only connect with one; ours asks for your name and email address and emails you a 6-digit code to confirm the address is yours. Signing in unlocks nothing extra and we don’t put your name or email into a database: they travel inside the sign-in token your assistant holds, signed so they can’t be altered, and we keep only the pseudonymous ID described below.

We keep a log of requests to the MCP server, so we can see which tools are worth having and spot abuse:

  • What you asked. Which tool was called and the values passed to it — for the quote checker, the vehicle, term, annual mileage, ZIP code, and the payment figures from the quote. Names, email addresses and phone numbers are never logged, only whether one was present; the dealer-help form on the website is the one place they are kept.
  • Which assistant was calling. The client name and version it reports, plus the user agent — so we can tell whether people reach us from one assistant or many.
  • A pseudonymous sign-in ID, if you signed in. A one-way code derived from your email address with a secret key, so requests from the same person can be counted together without the log holding the address. It can’t be turned back into your email.
  • A one-way hash of your IP address, never the address itself. It's hashed with a secret salt before it is stored, which gives us a stable pseudonym for catching a runaway client without holding anywhere you can be found. If the salt is missing the code logs no IP at all rather than a hash that could be reversed.
  • How the request went. The status, how long it took, and how many offers came back.

Each entry is written first to Amazon CloudWatch Logs and copied within minutes into the same Supabase database, both in the United States; the CloudWatch copy is deleted automatically after 30 days. If you signed in, we can recompute your sign-in ID from your email address, so we can find and delete those rows on request — email us from that address — and the CloudWatch copy expires on its own within 30 days. Requests made without signing in carry nothing that points back to you, so those can’t be traced to you, which cuts both ways.

Advertising and cookies

There is no advertising on LeaseCheetah and no ad network. The only cookies on the site are Google Analytics’ (above): they measure visits and nothing else, and the site sets none of its own.

Two things your browser does keep, and neither is a cookie. When you answer — or dismiss — the “Was this page useful?” box, we note that in your browser’s own local storage so the same page does not ask you twice; it holds nothing but the fact that you were asked. And if you correct the ZIP code we picked for you, that ZIP is kept in the tab’s session storage until you close the tab, so the prices stay yours as you browse. Neither is ever sent anywhere, and clearing your browser data removes both.

Until September 21, 2026 this section described advertising cookies set by Google AdSense. The ad tag was removed on that date; no ads had been served through it.

Changes and contact

If this policy changes, the date at the top changes with it. Questions about anything here: hello@leasecheetah.com.