Privacy and cookies
What this service stores, and why. Written to be read, not to be skimmed past.
Cookies and local storage
We do not use analytics, advertising or any third-party cookie. Two things are stored in your browser:
| Name | Purpose | Lifetime |
|---|---|---|
| ac_session | Keeps you signed in. Signed, HTTP-only, SameSite=Lax, and marked Secure when the service runs over HTTPS. Strictly necessary — without it you cannot sign in. | 14 days |
| ac_consent | Local storage, not a cookie. Remembers your answer to the cookie notice so we stop asking. | Until you clear it |
You can withdraw or change your choice at any time: show the notice again.
What we collect when you sign up
Free credits are an obvious target for someone opening one account after another, so at sign-up we record two anti-abuse signals:
- Your IP address, and
- a small browser signature — user agent, language, platform, screen size, timezone and processor count.
Both are stored as a salted hash. We keep no readable copy of your IP address or of the signature, and neither can be reversed into your original values. They are used only to count how many workspaces come from the same browser or network. The signature deliberately avoids canvas and WebGL probing: it is strong enough to notice repeat sign-ups from one machine, and too weak to identify you anywhere else.
Your account and your files
- Account: email address, your name if you give one, and a hashed password (Argon2 — we never see the password itself).
- Uploads: the workbook you submit and the annotated result. They are stored so you can download the result, and are deleted automatically after 90 days. Uploads you never confirm are removed within 24 hours.
- Job records: file name, how many rows were checked, the outcome counts and timings.
Your workbooks are used only to run the checks you asked for. They are not used to train anything, are not shared, and are not sold.
Who else sees the data
Checks are performed against Amazon's public product pages, through proxy providers we contract with. Amazon and those providers see the requests, as they would if you opened the pages yourself. No customer data is sent to any other third party.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your workspace entirely. Write to [email protected] and we will act within 30 days.