On-device processing
Barcodes are decoded in your browser. ID data is never transmitted to our servers.
No customer database
We don't collect, store, or sell the personal data on the IDs you scan. Nothing to leak.
HTTPS everywhere
The app is served over encrypted HTTPS with automatic certificates, required for camera access, too.
Minimal dependencies
We keep third-party services to a minimum and never share ID data with any of them.
What stays on the device
Everything sensitive. The decoded ID details, the scan log, your device ID, and any device name you set live in your browser's local storage on that specific device. We have no access to them. If you clear your browser data, they're gone.
What leaves the device
A few things, and never the sensitive ID data. When a device is online, the de-identified outcome of each scan (a pass or fail, an age as a plain number, the issuing state, the reason a scan did not pass, the age threshold checked, the device name, and any location label you set for that device) syncs to your private account dashboard so you can see your activity across all of your devices. This never includes names, dates of birth, ID numbers, addresses, or photos. Ordinary counter scans do not use GPS; the device name and location label are text you type in Settings, not a GPS reading. Location coordinates are used only in the optional DeliveryPro add-on, where they are sent to a mapping service to produce the delivery address, never any ID data. If you create an account, your email and, if you set one, an encrypted password are stored with our authentication provider so you can sign in. And if you submit a form on our website, the details you type are sent to us so we can reply. The decoded ID identity, the detailed scan log, and any DeliveryPro signatures or photos stay on the device.
Your part
Because you hold the data, you also control it. Any CSV you export is yours to store securely and handle in line with the laws that apply to your business. We recommend restricting who can access exported records and only keeping them as long as you need.
Reporting a vulnerability
Found a security issue? We appreciate responsible disclosure. Email support@trycarded.app with the details and we'll respond promptly.