Privacy and data handling

Account data

Email/password and enabled social identity providers are used only to create and authenticate the account. The application stores only the provider identifier, email and display name returned during login. It does not request contacts, posts, advertising profiles or ongoing social access.

Watch evidence

Listings, serial numbers, photographs and reports are private to the signed-in user. Production evidence files and generated PDFs are stored in Cloudflare R2, while account, report and collection records are stored in Cloudflare D1.

AI processing

When an OpenAI API key is configured, the evidence packet and uploaded images are sent to the OpenAI Responses API with application storage disabled.

External checks

When commercial theft-register or reverse-image connectors are configured, the minimum required serial or image evidence is sent to that provider under its terms.

Not a certificate

The report is decision support and does not guarantee authenticity, legal title, value, seller identity or freedom from theft claims.