Plainly, what we store and where it goes.
We collect the least we can to make Price Sweep work, and we tell you exactly what that is. You can delete everything from the profile menu, instantly.
Who's responsible
Price Sweep is operated as a personal project by an individual based in the United Kingdom (not a registered company). If you have a privacy question or want to exercise your rights under UK GDPR, please use the contact form. You can also delete your account and all associated data instantly from the profile menu (see Your rights below).
What we collect and where it goes
We collect the minimum needed to identify items, return prices, and (if you're signed in) sync your saved list across devices. Photos are transient: we send them to OpenAI for identification and don't store them.
| What | Where it goes / how long |
|---|---|
| Photo you upload | Sent to OpenAI's vision API for identification, then discarded. Not stored by us. OpenAI's privacy policy applies in transit. |
| Identified item titles, categories, prices | Sent to CEX's public search API (via a Cloudflare Worker) and to eBay's public sold-listings search. Both lookups are anonymous, neither service knows it's "you". |
| Your email + account ID | Held by Firebase Authentication (Google) for the duration of your account. Used to sign you in, attach your saved list to you, and email you reset links. |
| Your saved items | Stored in our Firestore database, keyed by your user ID. Visible only to you (and to anyone signed into your account). |
| Daily photo-scan counter | Stored in Firestore so we can enforce the free-tier 5/day cap. Counter doc auto-expires after 30 days. |
| Subscription / card details | If you upgrade to Pro, Stripe processes the payment. We see your Stripe customer ID and subscription status, never your card details. |
| Cookies / local storage | Firebase sets one auth cookie to keep you signed in. We use browser local storage for your saved list (offline), your trial photo counter, and your shop code if connected. No third-party tracking cookies. |
| Server logs | IP address + request path retained by Google Cloud Run for 30 days, used for debugging and rate-limiting. Never linked to your identity in a way that's queryable. |
Your rights
Under UK GDPR you can ask us to access, export, correct, or delete any data we hold about you. The fastest path for delete:
Open the app → profile icon → Account settings → Delete account. You'll be asked to type your email to confirm. On submit we cancel any subscription, delete your saved list, your Firestore record, and your Firebase user, in that order. The whole flow takes seconds and can't be undone.
Access, export, and correction requests will be handled through a contact email once it's set up, this page will be updated when it is. In the meantime, the delete flow above gives you the strongest right (erasure) immediately. You're entitled to lodge a complaint with the ICO if you're unhappy with how we've handled your data.
Children
Price Sweep isn't directed at people under 16 and we don't knowingly collect data from children. If a child's account is set up by mistake, the in-app delete flow removes all of its data immediately.
Changes to this notice
If we change what we collect or who we share it with, we'll update this page and, for anything material, notify signed-in users by email.