Privacy Policy
OneZeroTwo. Updated 2026-09-10.
What we collect
- Your account email and a hashed password. The hash is one-way (argon2id); we never store or see your password in plain text.
- The collection, watchlist, trade and sales records you enter. They exist so the app can do its job for you, and for nothing else.
- Scan usage counters and scan metadata (which engine read a photo, how long it took, whether it hit a quota). These contain no photo, no text read from a photo, no card name and no certificate number.
- Subscription status from Stripe: your plan, its status and renewal date. Card entry happens on Stripe's hosted checkout page. Card numbers never reach our server and we never see them.
- A billing event log for the payments on your account: the Stripe identifiers, the status, the plan, the renewal date and the amount charged. We deliberately strip everything else Stripe sends us, including your billing name, billing address and the brand and last four digits of your card. Those are kept by Stripe, not by us.
- Error logs with the route, status code and a short technical message. They contain no user-entered text and no email addresses.
Card photos are never stored
Photos you scan are processed in memory and then dropped. They are never written to disk or to our database. Our automated test suite pins this: the scan log schema has no column that could hold image bytes or text read from a photo, and a change that added one would fail the build.
Who else touches data (subprocessors)
- Stripe processes payments and stores your payment details under its own privacy policy.
- Anthropic receives scan photos for reading when the vision engine handles a scan. We do not store what was sent.
- Our email delivery provider receives your email address to deliver password reset and verification messages.
- DigitalOcean hosts the server and database.
No trackers
There are no analytics trackers, no advertising scripts and no third-party cookies on this site. The only cookies are the session cookies that keep you signed in. Usage metrics the operator sees are computed from our own database and never leave it.
Deleting your data
Ask us to delete your account (contact below) and its database rows are removed: collection, watchlist, sales records, alerts, sessions, password reset and verification tokens, scan counters and scan metadata, and your subscription status. The redacted billing event log described above is kept, because it is our own record of payments that actually happened and a business has to keep its financial records. Stripe retains its own payment records as financial regulations require it to.
Contact: gookegan@gmail.com