Privacy

What it does not record

• Your three answers. How often you order, what an order costs and how long you have been doing it are worked out in your browser and are never sent anywhere. Close the tab and they are gone.
• Cookies. There are none, which is why there is no banner asking you to accept any.
• Third-party trackers. No advertising pixels, no Google Analytics, no vendor tags. The page loads nothing from anyone else — not even its fonts, which are served from this domain for that reason.
• Your IP address is not stored in our database. Google's infrastructure logs it briefly for security and abuse prevention, as any web host does.

What it does record

• Four events. That someone started the form, finished it, pressed share, or left an email. Each is stored with the time, the page that linked you here, your browser's user-agent string, and a random id.
• The random id is generated per visit and kept in your browser's session storage. It exists so that one person pressing share twice counts as one person. It disappears when you close the tab, it is not a cookie, it is not linked to you, and it is not used on any other site.
• Your email address, only if you type it into the form.

Why

The events answer one question: do people share their receipt? That decides whether this app gets built at all. The lawful basis is legitimate interest under Article 6(1)(f) — first-party measurement of one page, for one purpose, with no profile, no cross-site tracking and no advertising.

The email address has one use: telling you once, when the app is out. The lawful basis is your consent under Article 6(1)(a), and you can withdraw it at any time by asking.

Where it is kept

In Firebase, which is run by Google, in a database located in Belgium (europe-west1). Google acts as a processor under its data processing terms. No one else receives any of it. Nothing is sold, and nothing is shared with advertisers.

For how long

• Events: twelve months, then deleted.
• Email addresses: until you have been told the app is out, or until you ask to be removed — whichever comes first.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected or deleted, object to it being held at all, or ask for it in a portable form. Email privacy@pockept.com and it will be done.

If you are not happy with the answer you can complain to your national data protection authority — the CNIL in France, the CNPD in Portugal, or the equivalent where you live.

Who is responsible

Tom Album is the data controller for this site. Write to privacy@pockept.com with anything on this page, and it will be answered within one month.