Plainly, what we store and where it goes.
We collect the least we can to make Pricesweep work, and we tell you exactly what that is. You can delete everything from the profile menu, instantly.
Who's responsible
Pricesweep is operated as a personal project by an individual based in the United Kingdom (not a registered company). If you have a privacy question or want to exercise your rights under UK GDPR, please use the contact form. You can also delete your account and all associated data instantly from the profile menu (see Your rights below).
What we collect and where it goes
We collect the minimum needed to identify items, return prices, and (if you're signed in) sync your saved list across devices. Photos are transient: we send them to OpenAI for identification and don't store them.
| What | Where it goes / how long |
|---|---|
| Photo you upload | Sent to OpenAI's vision API for identification, then discarded. Not stored by us. OpenAI's privacy policy applies in transit. |
| Identified item titles, categories, prices | Sent to CEX's public search API (via a Cloudflare Worker) and to eBay's public sold-listings search. Both lookups are anonymous, neither service knows it's "you". |
| Your email + account ID | Held by Firebase Authentication (Google) for the duration of your account. Used to sign you in, attach your saved list to you, and email you reset links. |
| Your saved items | Stored in our Firestore database, keyed by your user ID. Visible only to you (and to anyone signed into your account). |
| Monthly scan counter | Stored in Firestore so we can enforce the free-tier 10/month and Pro 250/month caps. Counter doc auto-expires after six months. |
| Subscription / card details | If you upgrade to Pro or Power Seller, Stripe processes the payment. We see your Stripe customer ID and subscription status, never your card details. |
| Cookies / local storage | Firebase sets one auth cookie to keep you signed in. We use browser local storage for your saved list (offline), your trial photo counter, and your shop code if connected. No third-party tracking cookies. |
| Server logs | IP address + request path retained by Google Cloud Run for 30 days, used for debugging and rate-limiting. Never linked to your identity in a way that's queryable. |
| Error reports | If something crashes we send a stack trace to Sentry so we can fix it. We scrub IP addresses, auth tokens, and request bodies before it leaves your browser, so no personal data or photos go with the report. 90-day retention by Sentry. |
| Bad-match feedback (opt-in) | When you tap "Report a bad match", we ask permission before sending the photo and the wrong match details to our private storage bucket. You can decline and the row just disappears. If you share, we use it to improve the matcher and delete it after 180 days. |
| Analytics | If you accept the cookie banner we load Google Analytics 4 to count visits and see which pages get used. IPs are anonymised, ad-personalisation signals are disabled, and there's no cross-site tracking. Decline and nothing loads. You can change your mind anytime from the burger menu → Cookie settings. |
Your rights
Under UK GDPR you can ask us to access, export, correct, or delete any data we hold about you. The fastest path for delete:
Open the app → profile icon → Account settings → Delete account. You'll be asked to type your email to confirm. On submit we cancel any subscription, delete your saved list, your Firestore record, and your Firebase user, in that order. The whole flow takes seconds and can't be undone.
Access, export, and correction requests will be handled through a contact email once it's set up, this page will be updated when it is. In the meantime, the delete flow above gives you the strongest right (erasure) immediately. You're entitled to lodge a complaint with the ICO if you're unhappy with how we've handled your data.
Children
Pricesweep isn't directed at people under 16 and we don't knowingly collect data from children. If a child's account is set up by mistake, the in-app delete flow removes all of its data immediately.
Changes to this notice
If we change what we collect or who we share it with, we'll update this page and, for anything material, notify signed-in users by email.