Privacy Policy

Last updated: June 19, 2026

Swanson Digital LLC ("we," "us," or "our") operates cartscout.net, a grocery price comparison service that helps shoppers find the best prices at stores near them. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We do not sell your personal information to anyone.

1. Information We Collect

Account information. When you create an account, we collect your email address and a hashed password (stored securely via Supabase Auth). If you sign in with Google, we receive your name and email address from Google.

Location data. We ask for your zip code to show you prices at nearby stores. You can enter it manually, allow your browser to detect it via the Geolocation API, or let us estimate it from your IP address. We store your zip code in your browser's local storage and, if you're signed in, associate it with your account preferences. We do not track your precise GPS location or share it with third parties.

Search data. When you search for grocery items, we process the search query to return results. We do not permanently retain individual search histories tied to your identity beyond your current browsing session.

Community price submissions. If you submit a price report, we collect the item name, price, store name, unit, your zip code, and optionally a photo you upload. Submissions are attributed to a general zip code area, not your full identity, and are visible to other users to help the community.

Savings data. If you are signed in, we record estimated savings when you click "Shop Now" on a result. This data is stored in your account and visible only to you.

Store preferences. We store which stores you have toggled on or off so we can remember your preferences across sessions.

Usage and device data. Our hosting provider (Render) automatically collects standard server logs including IP addresses, browser type, and pages visited. We use this data only for security and service reliability purposes.

2. How We Use Your Information

To provide grocery price comparisons and find stores near your location
To display community-submitted prices alongside live API prices
To show delivery pricing and compare it to in-store prices where available
To track your estimated savings over time
To remember your store preferences and zip code
To improve the accuracy and coverage of our price data
To respond to support requests or questions you send us

We do not use your data for advertising profiling, sell it to third parties, or share it with anyone except as described in Section 3.

3. Third-Party Services

CartScout relies on the following third-party services to operate. Each has its own privacy policy governing their data practices.

Supabase (supabase.com) — our database and authentication provider. Your account credentials, saved preferences, community submissions, and savings data are stored on Supabase's infrastructure.
Kroger — we use Kroger's official Product API to retrieve live grocery prices. No personal data is sent to Kroger when you search.
Instacart Developer Platform — we may use Instacart's API to retrieve grocery delivery pricing from participating retailers. When delivery pricing is shown, it is clearly labeled as Instacart delivery pricing. No personal data beyond your zip code is transmitted to Instacart. If you choose to place a delivery order through Instacart, you will be directed to Instacart's platform and governed by their Privacy Policy and Terms of Service.
Google OAuth — if you choose "Sign in with Google," Google authenticates you and shares your name and email with us. Governed by Google's Privacy Policy.
Amazon Associates — some links on CartScout are Amazon affiliate links (Associate ID: cartscout-20). If you click these links and make a purchase, Amazon may set a tracking cookie. We earn a small commission at no extra cost to you. Governed by Amazon's Privacy Policy.
Render (render.com) — our hosting provider. Standard server logs are retained per Render's data retention policies.
OpenStreetMap Nominatim — used to convert GPS coordinates to a zip code when you allow browser geolocation. No account is created; only your coordinates are sent momentarily.
ipapi.co — used as a fallback to estimate your zip code from your IP address if geolocation is unavailable. No personal data is stored by us from this lookup.

4. Cookies and Local Storage

CartScout uses your browser's local storage (not traditional cookies) to remember your zip code, radius preference, store filter settings, and onboarding status between visits. This data never leaves your device except as part of normal app requests.

Supabase Auth sets a secure session cookie to keep you signed in. This cookie is used solely for authentication and expires when you sign out.

If you click an Amazon affiliate link, Amazon may set their own tracking cookies. We do not control or access those cookies.

5. Community Price Submissions and Photos

Prices you submit are displayed publicly on CartScout to help other shoppers. Submissions are associated with a zip code area, not your name or email. Photos you upload are stored on our server and may be visible to other users viewing the same item.

If you would like a submission removed, contact us at the address below and we will delete it promptly.

6. Data Retention

Account data — retained until you request account deletion.
Savings records — retained as long as your account is active.
Community submissions — retained indefinitely to maintain price history, unless you request removal.
Server logs — retained per Render's standard data retention policies (typically 30 days).
Local storage data — stored only on your device; cleared when you clear your browser data.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate information in your account
Delete your account and associated personal data
Export your data in a portable format upon request
Withdraw consent for location access at any time via your browser settings
Request removal of community submissions you made
Opt out of any future marketing communications

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

8. Children's Privacy

CartScout is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), hashed password storage, and Row Level Security on our database so users can only access their own records. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know — you may request a full list of the categories and specific pieces of personal information we have collected about you in the past 12 months.
Right to Delete — you may request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights. We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising.

To submit a CCPA request, contact us using the information in Section 11.

11. International Users

CartScout is operated from the United States. If you are accessing CartScout from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using CartScout, you consent to this transfer. If you have questions about your rights under applicable local law (including GDPR for European residents), please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of CartScout after changes are posted constitutes your acceptance of the updated policy. For material changes, we will make reasonable efforts to notify users via email or an in-app notice.

13. Contact Us

If you have any questions about this Privacy Policy or want to request access, correction, deletion, or export of your data, contact us at:

Swanson Digital LLC
United States
Email: trycartscout@gmail.com