What we collect, and what we don't

Your email address and password (stored only as a bcrypt hash), an optional display name, your subscription state, and the products you have scanned or saved. That is the lot.

We do not ask for your date of birth, your address, your phone number or anything about your skin or your health, because BeautySignal does not need any of it to work.

Scan history is private to the account that made it. This is enforced in PostgreSQL by row-level security: BeautySignal staff hold no database permission that would let them read it, so it is not a matter of us promising not to look.

We do count scans in aggregate — how many happened, and which barcodes came back unknown — because that is how we decide which products to add next. Those aggregates carry no user identifier at all.

We do not sell personal information. We do not build advertising profiles. We do not send your scan history to any analytics service. We do not track you across other sites.

If you subscribe, card details go to Stripe and are handled by Stripe. BeautySignal never sees or stores a card number. We keep the Stripe customer and subscription identifiers and the state of your subscription, and nothing else.

One cookie, which holds your session so you stay signed in. It is strictly necessary for the product to work, so there is no consent banner to dismiss. There are no advertising or tracking cookies to consent to.

You can export what we hold or delete your account from Account settings. Deleting removes your account, your scan history, your saved products and your submissions' link to you. Product information you contributed stays in the catalogue, because by then it is a fact about a product rather than a fact about you.

Sign-in and security events are kept for a year so we can investigate abuse. Aggregate scan counts are kept indefinitely, because they identify nobody.

BeautySignal is operated by Techvora. Write to support@techvora.net about anything here, including a request to see or delete what we hold.