In plain terms: we collect what you give us on the request form, plus your IP address and rough location (city-level, from your IP - not GPS) whenever you visit, log in, or scan. We use this to decide who gets access and to know the service is actually being used by people, not bots. We don't sell your data.
| Data | When | Why |
|---|---|---|
| Name, email, phone number | When you submit the access request form | To contact you about your request and, if approved, send your login credentials |
| Requested username & broker(s) | Same form | To set up your account with the right access |
| IP address & approximate location (city/region/country) | Every visit, login, scan, download, and signup request | Security, understanding real usage, and confirming requests are genuine |
| Username, hashed token, login/scan timestamps, broker used, pairs scanned | Every time you use the scanner while signed in | Access control and usage records |
Your token is never stored in plain text - it's hashed (PBKDF2-SHA256) before being saved, the same way a password would be. We can't see or recover your original token once it's issued.
We do not use GPS or ask your browser for location permission. Your IP address is looked up against a third-party geolocation service (ip-api.com) to get a rough city/region/country - this is the same kind of estimate any website can get from your connection, not a precise location, and can be inaccurate if you're on a VPN or mobile data.
We do not sell, rent, or otherwise trade your personal data to third parties for marketing or any other purpose.
Access request details are kept until your request is processed. Activity logs (login/scan records) are kept for as long as your account remains active, to support the access-control system. If your access is revoked, you can ask us to delete your personal data - see below.
You can ask us at any time to tell you what data we hold on you, correct it, or delete it. Email grabbertries@gmail.com with your request. We'll respond as soon as reasonably possible.
The Chrome extension and mobile web scanner store your login token locally in your browser (chrome.storage.local or localStorage) so you don't have to sign in every time. This stays on your device - it is not transmitted to us except when actually making a scan request.
This Service is not directed at, or intended for use by, anyone under the legal age of majority in their jurisdiction. We do not knowingly collect data from minors.
We may update this policy from time to time. Material changes will be reflected in the "last updated" date above.
Questions about this policy, or to exercise your data rights: grabbertries@gmail.com, or via the contact links on the main site.