The short version
- Your photo is sent to Google Gemini to identify the item and is not stored on our servers after your result.
- We keep your account email, your valuation results and your credit history.
- Payments are handled by Stripe. We never see your card number.
- We record which pages you visit and where you came from (the referring site and campaign tags in the link), and link that to your account if you sign up.
- We use Google Analytics to count visits, with advertising features turned off.
- We don't sell or share your personal information for advertising, and there are no ads on the site.
- Email support@howmuchisitworth.us to see or delete your data.
1. Who we are
This policy covers howmuchisitworth.us, run by howmuchisitworth (“we”). Contact: support@howmuchisitworth.us. [To confirm: registered legal name and mailing address.]
2. What we collect
| Data | Why | How long we keep it |
|---|---|---|
| Photos you upload, and any note you add | To identify and value the item | Not stored on our servers. Held in memory only while the valuation runs |
| Valuation results (item name, price range, sources, the note you added) | So you can see your past results; to improve accuracy | Until you delete your account |
| Account: email address, and your name if you sign in with Google | To sign you in and keep your credits | Until you delete your account |
| Credit and purchase history (amounts, dates, Stripe payment reference) | To give you the credits you paid for; tax and accounting | As long as tax law requires [to confirm] |
| Usage data from Google Analytics: pages visited, device and browser type, approximate location, and events such as “photo selected” or “valuation finished” | To see which pages work and where people get stuck | 14 months (Google Analytics retention setting) [to confirm in GA settings] |
| Our own visit statistics: a random visitor ID (cookie), pages visited, actions such as “photo selected” or “checkout started”, the site that linked you here, campaign tags in the link (utm_*, gclid), the first page you landed on, and whether you used a phone or computer. Linked to your account once you sign up. We don't store your IP address with it. | To see where visitors and customers come from and where people get stuck | [To confirm, e.g. 25 months], or until you delete your account |
| Technical data: IP address, browser, pages requested, error logs | Security, preventing abuse, fixing problems | [To confirm, e.g. 30 days] |
3. Photos and AI processing
When you ask for a valuation, your photo and note are sent to Google's Gemini API, which identifies the item and runs web searches to estimate its value. Google processes them under its Gemini API terms. [To confirm: we use the paid Gemini API, under which Google does not use your content to improve its products.] Your browser keeps a copy of the photo while you sign up so you don't have to upload it again, and deletes it once the valuation has run or after one hour.
We don't use facial recognition. Please don't upload photos of people.
4. Who we share data with
- Supabase: database and sign-in.
- Google: Gemini API (photos and notes, to produce valuations) and Google sign-in, if you use it.
- Stripe: payments.
- Google Analytics: visit and usage statistics, with Google Signals and ad personalization turned off.
- Vercel: website hosting. [To confirm hosting provider.]
Each receives only what it needs for its job. We don't sell personal information or share it for cross-context behavioral advertising, as those terms are defined in California law.
5. Cookies
We use a cookie to keep you signed in and Google Analytics cookies to count visits. If your browser sends the Global Privacy Control signal, analytics isn't loaded. See the Cookie Policy.
6. Your rights
You can ask to see, correct, download or delete your personal information. Email support@howmuchisitworth.us from the address on your account. We'll verify the request comes from you and reply within 45 days. You can use an authorized agent. We won't treat you differently for using these rights. If we refuse a request, you can appeal by replying to our answer.
California residents: in the last 12 months we collected identifiers (email, IP address), commercial information (purchases), internet activity (pages and errors) and the content you upload, for the purposes above. We did not sell or share it.
7. Children
The service is not for children under 13, and we don't knowingly collect their information. If you think a child has given us data, email us and we'll delete it.
8. Security
Data is encrypted in transit (TLS) and at rest by our providers. Access is limited to people who need it. No system is perfectly secure.
9. Changes
We'll update the date above when this policy changes, and email account holders about material changes.
10. Contact
howmuchisitworth · support@howmuchisitworth.us