Your camera feed never leaves your device. We do not require an account to use the site. We do run Google Analytics and Google AdSense, which set their own cookies — details below, and any standard content blocker will stop them.
Barcode scanning happens entirely in your browser, using its built-in BarcodeDetector where available. The video stream is never uploaded to us or to anyone else. Only the decoded barcode number is sent, in order to look the product up.
Scan events. We log that a barcode was looked up, whether we had a record for it, the interface language, and a coarse country if our host already resolved one. These records contain no IP address, no account link and no session identifier, so they cannot be traced back to a person or joined into a history. We use them to see which products people want that we do not yet cover.
Accounts (optional). Only needed to post a review, report a problem, or save an allergen profile. We store a username, an email address and a hashed password. Passwords are hashed with bcrypt and are never stored or recoverable in plain text.
Allergen profile (optional). If you save one, we store which of the 14 EU allergen categories you selected, against your account, so we can warn you when you scan a product containing one. It is never shared or sold.
Contributions. If you submit a product or a label photograph, we store the image and any details you provide, and may publish them as part of the product record.
We do not sell your data, and we do not build advertising profiles ourselves.
We set one session cookie when you log in, which keeps you signed in and protects forms against cross-site request forgery. It is not used for tracking. Google Analytics and AdSense set their own cookies as described above. Your language choice and whether you dismissed the install prompt are kept in your browser's local storage, which is never sent to us.
Under the GDPR you may request a copy of the personal data we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Write to the contact form and we will action it. Because scan events carry no identifier, they cannot be linked to you and are therefore outside the scope of such a request.
This site is not directed at children under 13, and we do not knowingly collect their personal data.
If this policy changes materially we will update the date above. Questions: the contact form.