What we keep, and what you can erase

Your account

An account stores your email, a password hash when you set one, the time you confirmed the email, sign-in tokens, and any API keys you create. We use those to sign you in and to know which reports, votes, and watches are yours.

We do not sell personal data. We do not store a precise location. A distance sort uses a location your browser shares for that page only, and that location is not written down.

Stock reports

A stock report is the shelf observation: the store, the level, the time, and any purchase limit, restock time, quantity, price, or aisle note you included. Other shoppers can read it. The note stays on the report because it describes the shelf, not you.

The report points at your account while the account exists. After you delete the account, that link is removed. The report stays so the availability history remains, and it reads as a guest report.

Analytics and session recording

We use PostHog, hosted in the United States, to learn how the site is used. It records the pages you open, the buttons you tap, and actions such as a search, a report, a vote, or a watch. A search records the words you typed unless they look like an email, a phone number, or an ID. PostHog also receives your browser, device, and IP address, and uses the IP address to estimate your city and country.

PostHog also records sessions: a replay of the page and your taps and scrolls, kept for 30 days. Everything you type into a form is hidden in the replay, and so are your email and aisle notes.

When you sign in, these records are linked to a random account ID, never to your email. When you sign out or delete your account, the browser drops that ID. Past records stay, and they still hold no email. A content blocker that blocks PostHog turns all of this off, and the site still works.

Deleting your account

Deletion removes your email, password, sign-in tokens, API keys, watches, and votes. It cannot be undone. Votes you cast no longer count toward a report. Watches stop. Stock reports you filed stay, without your account on them.

Sign in and open Account to delete it. You confirm by typing the email on the account.