Low Tox Gear · Scanner

Privacy notice

Last updated: 10 May 2026

This covers what the Low Tox Gear Scanner at scan.lowtoxgear.com collects, how we use it, and how to delete it. The lowtoxgear.com storefront has its own Shopify policy covering store purchases.

The product is evolving. We'll update this page when material changes ship — the “last updated” date above tells you when. If you want to be told before any change rolls in, drop us a line via the contact section below.

What we collect today

On your device only (your browser's local storage):

Your selected conditions (e.g. MCAS, eczema, pregnancy) — used to escalate the severity of relevant flags.
Your recent scan history (barcode, product name, flag count, timestamp). Capped at 50 entries.
UI preferences (which home tab you last used, whether you've dismissed prompts).

You can clear all of this at any time via the in-app Clear all button on the Recent Scans page, or by clearing your browser data.

On our servers:

Scan events. When you look up a barcode we log the barcode, timestamp and a one-way hash of your IP address. Used to prioritise catalogue coverage and debug bad lookups.
Photographed labels. When you photograph an ingredient list, the image is sent to our OCR service and the transcribed text is saved to the public catalogue (keyed on the product barcode where available). The image itself is not retained. The transcribed text is visible to anyone who later scans the same product.
Email subscriptions. If you submit your email, we store: the email, the conditions you had selected at signup, a hashed IP, your user agent, and which screen the signup came from (so we know which calls-to-action work).
Feedback and product submissions. Anything you type into the feedback or “missing product” forms, plus a hashed IP for spam investigation.

How we use it

To return scan results to you, in real time.
To grow the AU catalogue by adding products other users have photographed or submitted.
To improve the chemical database based on feedback, error reports and aggregate usage patterns.
To send you the email content you signed up for (welcome cheat-sheet, periodic research updates), and to remove you on request.
To measure which features work and where users drop off — by analysing aggregate, non-identifying counts.

Third parties we use

We rely on a small number of service providers to operate the scanner. They process data on our behalf and only as needed to provide their service:

Cloudflare — hosting, DNS, CDN, edge caching, abuse protection.
Cloudflare Workers AI — runs the OCR model that transcribes photographed labels.
Resend — sends transactional and welcome emails on our behalf.
Cloudflare Turnstile (when active) — invisible challenge on signup forms to block automated abuse.
Google Analytics (gtag.js) — page-view and conversion analytics. Loaded on every public scanner page.
ProfitPather — first-party page-view / event analytics (sessions are tracked via sessionStorage, no cross-site cookies).

We may add or change processors as the product evolves (for example: a marketing-email platform if our list grows, an analytics provider to measure conversion, an authentication service when we ship cross-device accounts). We'll update this list when that happens.

What's coming, and what it means for your data

Some features we're building will require us to store more on our side than we do today. We're flagging them up-front so there are no surprises:

Cross-device accounts. If you opt in to sync your scans and personalisation across devices, we'll store your scan history and selected conditions against your account on our servers (not just your device). This is opt-in — you only sync if you sign in.
Analytics & conversion measurement. We may add page-view and event analytics to understand which content helps users (and which doesn't), and to attribute scanner usage to lowtoxgear.com store visits where it makes sense. If we use cookies for this, we'll show a consent banner where the law requires it.
Cross-domain attribution. When you click from the scanner to lowtoxgear.com (or vice versa), we may pass UTM-style tags so we can measure what's working. These tags don't identify you personally.

Cookies & tracking technologies

The scanner currently uses localStorage only; there are no cookies set on this domain at the time of writing. If we add cookies (for sign-in, analytics, abuse protection) we'll list them here and, where required by Australian, EU or other applicable privacy law, ask for your consent before non-essential ones are set.

What we're committed to, regardless of where the product goes

We won't sell or rent your personal information. Sharing with the service providers listed above (so they can run the service for us) is not sale.
We won't collect anything we haven't disclosed on this page. If we add a new collection, this page is updated first.
You can ask for your data to be deleted — see the next section.
The scanner is educational, not medical advice. We don't make diagnoses, prescribe treatment, or share what you've scanned with healthcare providers, insurers or anyone else.

How to delete your data

Email subscription: click unsubscribe in any email, or reply asking us to delete your record. We'll action manually within 7 days.
Device-side state (conditions, recents, UI prefs): clear browser data, or use the in-app clear buttons.
Scan events / OCR submissions: these aren't linked to identifying information, but if you want them removed (matched by IP hash and timestamps), email us via the contact below.
Account data (when accounts ship): a single “Delete account” action will remove your stored scans, conditions, email and any other account data. We'll keep aggregate usage counts that are no longer linked to you.

Children

The scanner is not directed at children under 16. Don't use it if you're under 16, and don't enter someone else's details on their behalf without their consent.

Changes to this notice

As the product evolves, the practices on this page will too. The “last updated” date at the top reflects when this page was last revised. We'll keep historical versions available on request.

Contact

Questions, complaints, deletion requests, or anything you want flagged — reply to any email we've sent you, or write to hello@lowtoxgear.com.