Privacy Policy
Effective date: July 19, 2026
What we collect
- Account data. Sign-in is handled by Clerk. We receive your email address and basic profile data needed to authenticate you. We never see or store your password.
- Usage data. Standard server logs (IP address, user agent, request paths, timestamps) generated while operating and securing the Service. We also track a handful of anonymous product events — which page you're on, which scanner mode you ran — through PostHog, and send crash reports through Sentry, so we can catch bugs and see what's actually being used. Neither one drops a cookie or follows you between visits.
Payments. We do not see or store your card details. Card payments are handled entirely by Stripe, which sends us only the fact that a payment succeeded, the amount, and an identifier for it. If you pay by PromptPay and send us a transfer slip, that image is stored in your support ticket so the payment can be matched to your account; ask us in that ticket if you want it removed once the payment is confirmed. We keep a record of what you paid and when, because we are required to and because you may need it.
We do not sell personal data to anyone.
How we use it
Authentication, operating and improving the Service, abuse prevention, and security. Nothing else.
Third-party processors
The Service runs on infrastructure that processes data on our behalf:
| Provider | Role |
|---|---|
| Clerk | Authentication and session management |
| Cloudflare | Frontend hosting and network security |
| Railway | API hosting |
| Supabase | Database (accounts, subscriptions, support tickets) |
| Stripe | Card payments |
| PostHog | Anonymous product-usage analytics |
| Sentry | Error tracking and performance monitoring |
Each processes only what it needs to perform its role, under its own privacy terms.
Cookies
We use only the cookies required for sign-in sessions (set by Clerk). No advertising or cross-site tracking cookies. PostHog and Sentry don't set any cookies of their own either, and they lose track of you the moment you close or reload the page.
Retention and deletion
Account data is retained while your account is active. To delete your account and associated data, contact us through the link in the site footer.
Changes
We may update this policy; the effective date above reflects the latest revision.