Privacy Policy

Last updated 28 October 2026

Diecast-o-meter (“we”, “us”) is a web app for tracking diecast model collections and checking their market value. This policy explains what personal data we handle when you use diecastometer.com, app.diecastometer.com and the Diecast-o-meter Helper browser extension, and what you can do about it. Questions: [email protected].

What we collect

• Account: your email address and display name. If you sign in with Google, also your Google account ID (we receive your name and email from Google, never your password).
• Your collection: the cars you add (brand, model, scale, year, condition, categories, notes, prices paid and target prices), photos you upload, values and price history, and your settings.
• Price checks: the search text for each check and the eBay listings you approve or reject (title, price, shipping, date, link and image link).
• Feedback you send through the app.
• Subscription status if you buy Pro: Paddle tells us your Paddle customer and subscription IDs, status and renewal date. We never see your card or bank details.
• Technical data: IP address and request details in short-lived server logs, used for security and rate limiting; and error reports (browser, device type, the error and your account ID — not your email) so we can fix bugs.

Photos you upload are stripped of location and camera metadata (EXIF/GPS) before they are stored.

Why we use it

• To provide the service you signed up for: your account, collection, price checks and plan (performance of a contract).
• To keep the service secure, prevent abuse and fix errors (legitimate interests).
• To answer you when you write to us.

We don’t sell your data, show ads, or use advertising or cross-site tracking. We don’t use your collection to train AI models.

Cookies and local storage

• ds_session — keeps you signed in (essential, 30 days, HTTP-only).
• ds_oauth — protects Google sign-in against forgery (essential, 10 minutes).
• dm_signed_in — a “1” that lets diecastometer.com show “Open app” instead of “Log in”. It contains no personal data.
• Your browser’s local storage remembers your theme and language before you sign in.

We don’t use analytics or advertising cookies.

Who processes data for us

• Hetzner Online GmbH (Germany) — servers where the app and its database run.
• Cloudflare, Inc. — network, security, DNS, photo and backup storage (R2), and forwarding of mail to our address.
• Resend — sends sign-in emails (EU region).
• Functional Software, Inc. (Sentry) — error reports (EU region).
• Google LLC — only if you choose “Continue with Google”.
• Paddle.com Market Ltd — payments, as merchant of record (see their privacy notice at paddle.com).
• eBay — we search eBay’s public listings with the text of your price check; no personal data is sent. Sold-price searches run in your own browser through the Helper extension.

Some of these providers are based in or may access data from the United States. Where data leaves the EEA, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Account and collection data: while your account exists.
• When you delete your account, everything is permanently removed after a 7-day grace period (you can cancel during it). Encrypted database backups expire within 30 days after that.
• Server logs: a few days to a few weeks. Error reports: 90 days.

Your rights

You can see and export all your data at any time (Settings → Profile → Export CSV or Full backup), correct it in the app, and delete your account yourself. You can also ask us for a copy, correction, deletion or restriction of your data, or object to its use, at [email protected]. If you live in the EU/EEA, the UK or Ukraine, you may also complain to your data protection authority.

Security

All traffic is encrypted (HTTPS). We store no passwords; sign-in links and session tokens are stored only as hashes and expire. Access to servers is limited to key-based logins.

Children

Diecast-o-meter is not directed at children under 16, and we don’t knowingly collect their data.

Changes

If we change this policy in a meaningful way, we’ll tell you in the app or by email before it takes effect.