Privacy

Effective October 18, 2026. Tin Index is run by Loudoun Pros LLC, Leesburg, Virginia.

The short version

The only thing another person can learn about you here is your nickname. We use your email to sign you in and nothing else. Receipt photos are read once and thrown away. We publish and license the board's data in aggregate, with nothing in it that identifies you.

What we collect

• Email address, to sign you in with a link or code. Only you and our systems see it. If you tick the box for data notes, we also send occasional notes built from the board's data (state taxes, prices, trends), a few times a year at most; turn it off in Account or with the link in any note.
• Nickname, which is public next to everything you post.
• What you post: store, price, cans, discounts, loyalty card used, flavors seen in or out of stock, confirmations, reviews, and the time you posted. All of this is public on the board.
• A ZIP code if you type one in to filter the board. It is kept on your device. If you allow location access, your position is used on your device to sort stores by distance and is not sent to us.
• Receipt photos, if you snap one. The photo goes to our server, is sent to Anthropic's Claude API to read the store and the pouch lines, and is then discarded. We do not store it and it never appears on the board. Anthropic processes it under its API terms.
• Your 21+ confirmation, the date you confirmed, stored on your account and on your device.
• Device storage (localStorage) for your preferences: the 21+ confirmation, your ZIP, filters, and the last store you navigated to so we can ask "did they have it?". No tracking cookies and no advertising identifiers.
• Payment details, only if you buy Pro, and only at Stripe. We see that you paid, not your card.

What we do with it

• Run the board: show reports and work out confidence.
• Keep the reader honest: count how many receipts each account reads per day.
• Build aggregated, de-identified datasets of prices, availability, discounts, and loyalty-card savings by store, product, and time, which we may license to third parties such as brands, distributors, and researchers. These datasets contain no email addresses, nicknames, account identifiers, or per-person histories. We do not sell personal information.

Who else sees data

• Supabase hosts the database and sign-in. Netlify hosts the site. Anthropic reads receipt photos. Resend sends email. Stripe handles payments. Each gets only what it needs to do that job.
• Anyone can read the public board, including the nickname on each report.
• We will disclose information if the law requires it.

How long we keep it

Reports stay on the board; old ones fall out of the confidence model but remain in the history and the aggregates. If you ask us to delete your account, we delete your email and nickname and detach your reports, which stay on the board as "anon". Aggregated data that no longer identifies anyone is kept.

Your choices

• Change your nickname or post as "anon" at any time from your account.
• Delete individual reports and posts you made.
• Ask us to export or delete your account: tinman@tinindex.com. We answer within 30 days. Residents of Virginia, California, and other states with privacy laws have rights to access, correct, delete, and opt out of the sale of personal data; since we do not sell personal data, there is nothing to opt out of, and the rest is handled by that same address.

Security

Everything travels over HTTPS. The database enforces row-level rules so one account cannot read another's private data, and the server never hands your email to the page. No system is perfect; if something goes wrong we will tell affected people promptly.

Under 21

Tin Index is not for anyone under 21 and we do not knowingly collect information from anyone under 21. If you believe someone younger has an account, email us and we will remove it.

Changes

If this policy changes in a way that matters, we will say so on the board. The effective date at the top always reflects the current version.

Contact

tinman@tinindex.com. See also the terms of use.