Privacy Policy
Your privacy is fundamental to how we built StackerScan.
Last updated: November 3, 2026
Arnion LLC ("Arnion," "we," "us," or "our") operates StackerScan(the "Service"). The Service is designed with privacy at its core. We understand that coin images, identification results, documents, and precious metals ownership information may be sensitive, and we built the Service to give you control over your data.
Key Privacy Features:
- Optional anonymous username accounts
- Ability to opt out of storing uploaded files where that option is available
- Complete account deletion at any time
- Encryption for data at rest and in transit
- Any sensitive personal information detected in documents, such as addresses, phone numbers, or email addresses, is excluded from extraction and is not retained in our database systems
We use strictly necessary cookies to operate the site. With your consent, we also use non‑essential cookies for analytics. We show a consent banner globally until you make an analytics choice. Analytics cookies are off by default. When configured, an advertising pixel loads on web pages to measure ad visits and registrations independently of that choice. You can change your analytics preference anytime from “Cookie Settings” (available on the Home and Privacy pages).
Categories
- Strictly necessary: Required for core functionality (authentication/session). Always on.
- Analytics: Helps us understand usage.
Your Choices
- Use the banner (shown globally until you choose) or “Cookie Settings” to accept or reject analytics cookies.
- The advertising pixel is not controlled by the analytics preference or browser Global Privacy Control / Do‑Not‑Track signals.
- Consent choices are stored for 12 months and can be changed anytime.
- Records of connected-app calls aren't controlled by the analytics preference.
Your Choices: Communications
- Essential communications (for example, security alerts, incident notices, service changes) are required to provide StackerScan and cannot be turned off while you maintain an account.
- Non‑essential product updates (for example, new features or tips) are optional, include an unsubscribe link, and can be managed anytime inside the app.
- If you use StackerScan without an email (anonymous username), we surface essential notices in‑app whenever possible.
Account Information
- Email address (optional — you can use anonymous username). If you provide an email address, we use it for authentication and essential service communications (for example, incident notices, security alerts, and important updates about your account).
- Username (if chosen over email)
- Encrypted password hash
Service Data
- Coin or precious metals scan details, identification results, and transaction details (encrypted)
- Uploaded coin photos, documents, spreadsheets, or receipt images (where supported)
- Service, identification, portfolio, and display preferences
Usage Information
- Login timestamps
- Feature usage analytics (anonymized, except records of connected-app calls, which are linked to your account; see Connected apps)
- Error logs for troubleshooting
How We Use Your Information
- •Identification and Tracking: To analyze supported coin photos, provide identification results and estimated values, and, where available, track and display precious metals holdings.
- •Scan and Document Processing: To analyze uploaded images and extract information from supported documents using AI-assisted tools. Uploaded files can be deleted as described below.
- •Account Security: To authenticate your access and protect your account from unauthorized use.
- •Service Improvement: Anonymized usage data and submitted scan materials allow us to understand which features are most valuable, where to focus development, and how to improve scanning accuracy.
- •Customer Support: To respond to your inquiries and provide assistance when needed.
- •Service & Transactional Communications: We use your contact details (for example, your email address) to send non‑marketing, service-related messages, including:
- Incident and error notifications that may have affected your account or recent activity
- Fixes, reliability updates, security alerts, and important changes to the service
- Account, billing, or policy updates required to run the service
These are considered essential communications for providing StackerScan and cannot be opted out of while you use the Service. You can still opt out of non‑essential product updates; see “Your Choices”.
- •Product Updates (non‑essential): With your preferences respected, we may also send non‑essential product updates (for example, new features or tips). You can opt out of these at any time without affecting your access to StackerScan.
Legal Bases for Processing (EEA/UK)
- Performance of a contract (Art. 6(1)(b)): To create and maintain your account, authenticate you, process receipts, and send essential service communications.
- Legitimate interests (Art. 6(1)(f)): To monitor reliability, maintain security, notify you of incidents or fixes related to your use of StackerScan, improve the Service, and keep connected apps working and secure, and see how they are used.
- Consent (Art. 6(1)(a)): For non‑essential cookies/analytics and non‑essential product update emails where required. You can withdraw consent at any time.
We Never
- ✕Sell or share your personal information with third parties, except an app you connect yourself
- ✕Use your scan, identification, or portfolio data for marketing purposes
- ✕Store unencrypted sensitive financial information
- ✕Share your private coin scans or precious metals holdings with anyone, except an app you connect yourself (see Connected apps)
- ✕Require real identity verification for basic features
Encryption
All sensitive data is encrypted using industry-standard AES-256 encryption at rest and TLS 1.3 for data in transit.
Data Location
Your data is stored in secure, SOC 2 compliant data centers. We use redundant backups to ensure your portfolio information is never lost, while maintaining strict access controls.
Access Controls
Only essential personnel have access to production systems, and all access is logged and audited. We use multi-factor authentication and principle of least privilege for all internal access.
You have the right to:
- Access all data we have about you
- Export your portfolio data in standard formats
- Delete your account and all associated data
- Opt out of receipt storage on our servers
- Use the service with an anonymous username
- See and revoke every app you've connected, from Account → Connected apps
Data Deletion
When you delete your account, all your personal information, portfolio data, and uploaded receipts are permanently removed from our servers within 48 hours. This action is irreversible.
We use a limited number of third-party services to operate StackerScan:
Essential Services
- Payment processing: Securely processes payments without sharing your card details with us
- Cloud infrastructure: Hosts the service and supports receipt processing
- AI model processing: Extracts transaction details from receipts
- Authentication and database services: Secures accounts and stores service data
- Email delivery: Sends account and service communications using only the minimum information necessary, such as your email address and the relevant message content
Apps you connect yourself aren't our service providers; see Connected apps.
Privacy Commitment for the AI Services We Use
We do not permit our AI model providers to use your data to train their models or retain your data after processing it for StackerScan.
This commitment covers the AI services we use to run StackerScan. An AI app you connect to your account yourself, such as ChatGPT or Claude, is covered by its own company's policy instead; see Connected apps.
These services are carefully selected for their strong privacy practices and compliance with data protection regulations. We share only the minimum necessary information with these providers.
You can connect an AI app, such as ChatGPT or Claude, to your account so that it can read your stack. Before it can, you approve it on a screen that says:
It will be able to see
- Your holdings: each item, its metal, weight and what you paid
- Your stack's value today, and how it has changed
- Your stack's value and holdings over time
It won't be able to
- Add, change or delete anything
- See your email or password
- Use your credits
It stays connected until you disconnect it in Account → Connected apps.
What a connected app can read
- Each holding's purchase date, metal, product, year and mint mark
- Your notes and tags on it
- Its weight and piece count
- What you paid, tax and shipping included
- Its value, return and premium paid
- The stack's name, currency, weight unit and locale
- Its totals by metal
- Its weight and value history by day
Sales are counted, not listed.
What it can't read or do
- Your email, username or password
- Uploaded photos, receipts, documents or scan results
- Anyone else's stack
- Your credits or plan
- Adding, changing or deleting anything
What we store about each connection
- The connection: which app (name and address), the site that asked, when you connected, and what it may do (read your stack). It's kept until you revoke it or delete your account.
- The app's sign-in keys: a key that works for 1 hour, and a renewal key that lapses after 90 days without use, after which the app has to ask you to sign in again. Revoking the app or deleting your account deletes both immediately.
- A short sign-in session while you approve, ending after 15 minutes.
- A per-person call counter for the rate limit, kept only for the limit window.
We never store what the app asked, what it got back, your conversation with it, or the locale and location hints ChatGPT sends. We read those hints only to format dates and numbers in the reply.
What the app's company keeps
When a connected app reads your stack, what it reads is sent to the company behind that app (for example OpenAI for ChatGPT, or Anthropic for Claude) and becomes part of your conversation there. That company's own privacy policy and your settings with it decide how long it keeps that data and whether it uses it to train models. Our commitments about the AI services we use don't cover an app you connect, and we can't see or delete what it holds. Revoking a connection stops future reads. To remove what an app already received, delete the conversation in that app.
Read OpenAI's privacy policy and Anthropic's privacy policy.
Analytics
When a connected app calls StackerScan, we record which tool it used, whether the call worked, how long it took, which app made it and that app's software version, and when you connect, decline or revoke an app. These records are linked to your account and are kept whatever your cookie choice, because they don't come from your browser. We use them to keep connected apps working, enforce the rate limit and see how the feature is used. They never include what the app read or what you asked it.
Records linked to your account are kept while you have an account, and are deleted when you delete it: from your account straight away, and from our analytics service within 7 days. We also keep a count of connected-app calls (tool, result, app's site) with nothing that identifies you, to measure reliability.
When you sign in with Google, StackerScan requests only the non-sensitive scopes: openid, email, and profile. We use this limited data solely to:
- Authenticate your account and keep you signed in.
- Display your Google profile name and profile image inside your account.
- Store your primary Google email address for login and essential account communication.“Essential account communication” includes service notices, incident updates, security alerts, and other transactional messages required to operate StackerScan.
We do not request or access any other Google data, and we never use your Google information for advertising, marketing, or data mining. Your profile image and email are stored securely with the rest of your account details and are deleted if you remove your account or disconnect Google sign-in.
You can revoke StackerScan's access at any time from your Google Account permissions page or you may use the Delete My Data feature to delete all of your account data including the stored Google-derived data.
Our handling of Google user data complies with Google’s Limited Use requirements; your information is never shared with third parties except as necessary to provide the StackerScan Service as described in this Policy.
- Active Accounts: Your data is retained as long as your account is active.
- Deleted Accounts: All data is permanently removed within 48 hours of deletion request.
- Anonymous Accounts: Anonymous accounts with no saved content are deleted after ten days of inactivity.
- Receipts: If you opt out of server storage, receipts are deleted immediately after processing.
- Connected apps: Until you revoke the app or delete your account (details in Connected apps).
- Service communication logs: Delivery metadata for essential and transactional messages (for example, delivery status) is retained for up to 24 months to investigate delivery issues, meet record-keeping obligations, and improve reliability, after which it is deleted or anonymized.
If you have any questions about this Privacy Policy or how we handle your data, please don't hesitate to contact us:
Arnion LLC operates StackerScan from Washington State, USA. This Privacy Policy is effective as of November 3, 2026 and remains in effect except for future changes, which take effect when posted on this page. We may update this Privacy Policy, and you should review it periodically.