Privacy Policy

Draft: This document has not yet been reviewed by counsel. The language below is a starting point and will be revised before public launch.

Last updated: 2026-04-26

What we collect

To provide Packle, we collect the following data:

  • Account information. Email address, display name, hashed password (or third-party sign-in identifier).
  • Item content. The names, images, notes, tags, and barcode associations you create.
  • Images. Photos you upload, stored in Cloudflare R2. We generate resized variants for display.
  • Barcode lookups. Codes you scan are checked against a local database first; if not found, we may query third-party product APIs (see "Sub-processors" below).
  • Usage analytics. Page views, country, device type, and similar aggregated metrics via Cloudflare Analytics Engine. We do not associate individual page views with your account in our analytics store.
  • Server logs. Standard request logs (IP address, user agent, request path, response code) retained for security and operational diagnostics.

How we use it

  • To provide and improve the Service.
  • To authenticate you and protect your account.
  • To respond to support requests and communicate service updates.
  • To detect and prevent abuse.

We do not sell your personal data. We do not use your item content to train any AI model.

Sub-processors

  • Cloudflare — content delivery, edge caching, tunnel routing, R2 image storage, Durable Objects for sync, Analytics Engine.
  • Stripe — payment processing for subscriptions.
  • Open Food Facts, OpenLibrary, UPCItemDB, Go-UPC, OMDB — third-party barcode lookup APIs queried only when a scanned code is not in our local database. Only the barcode value is sent; your account identity is not.

Storage and retention

Data is stored in PostgreSQL on infrastructure operated by the Service. Images are stored in Cloudflare R2. Account data is retained while your account is active and for a reasonable period thereafter to support backups and dispute resolution. Deletion requests are honored as described below.

Your rights

You can access, export, or delete your data at any time from your account settings, or by emailing [email protected]. Depending on your jurisdiction you may have additional rights under GDPR, CCPA, or other privacy regulations.

Cookies and local storage

Packle uses cookies for authentication (a session token issued by the auth system) and uses your browser's local storage and IndexedDB to enable offline functionality and remember your UI preferences. We do not use third-party advertising cookies.

Children

Packle is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Contact

Privacy questions? Email [email protected].