Privacy
Very little to say.
That is the point.
Most privacy pages are long because there is much to excuse. This one is short because there is little to tell.
What stays on your device.
Your photos and your logs never leave your hands. The camera reads a garment and forgets it; the ledger of what you checked lives on the device, and the house cannot read it.
The little the house holds.
When you buy, the house keeps your receipt address — so your key can find you again. When a gift is addressed to you, it keeps that inbox, so the key reaches you and no one else. When an analyst's code is redeemed, it keeps where the key was sent. Three columns, nothing else.
Your email, one row, one region, deleted on request.
Your receipt address is stored in the European Union. This is the entire data surface — there is nothing else to delete, because there is nothing else.
Crash reporting, if you allow it.
If the app breaks, you may choose to tell the house. Crash reports are opt-in at first run, crashes only, nothing behavioral — ever. If you say nothing, nothing is sent, and nothing about the app works differently.
This site.
These pages run no analytics, no pixels, no third-party scripts. The fonts are self-hosted. The house does not watch you read, and it does not follow you home.