Privacy notice.

Last updated: October 26, 2026

C-Store Scanner operates cstorescanner.com. This notice explains how we handle information for the website and our early-access waitlist. Contact us at admin@cstorescanner.com.

Information you give us

Joining the waitlist requires your first name, last name, business name, and email address. Your phone number is optional. We also record your signup date, subscription status, and the version of the signup notice. If you contact us, we receive the information you include in your message.

How we use it

We maintain the waitlist, consider stores for the limited early-access pilot, send your welcome acknowledgement and pilot and availability updates, respond to inquiries, and protect the service from abuse. Providing a phone number does not subscribe you to automated calls or text-message marketing.

We do not sell or rent your personal information, use it for targeted advertising, or add you to unrelated mailing lists.

Website activity and Instagram links

We count page views, broad traffic sources, signup-button clicks, and completed signups. Reports may show whether a visit came from an Instagram bio, story, reel, or post, and a broad device category. Analytics records exclude form details and full referral URLs. Campaign categories may also be linked to your signup so we can understand how people find the waitlist.

Our activity measurement uses no advertising pixels, analytics cookies, persistent visitor identifiers, or fingerprinting. Limited campaign context can remain in your browser’s session storage for the tab. Global Privacy Control and Do Not Track disable optional browser activity measurement and campaign attribution. We still count saved waitlist records to operate the waitlist.

Security checks and service providers

Cloudflare provides hosting, database storage, recovery storage, and security. Its Turnstile service processes browser and network signals, including IP addresses and browser information, to prevent bots and abuse and improve bot detection. Our application uses short-lived protected IP-based records to limit abuse; it does not store raw IP addresses in its analytics or waitlist tables. Hosting providers may process request information in their own security and diagnostic systems.

Resend processes recipient addresses, email content, and delivery information to send welcome emails and private signup notifications. Authorized C-Store Scanner personnel can receive your signup details in our business inbox and access private waitlist records. Our email providers process those mailbox copies. Delivery, bounce, and complaint events help us prevent unwanted or undeliverable email. Email open and click tracking are off.

The website loads fonts from Google Fonts, so your browser sends Google the network information needed to deliver them, including your IP address. See Cloudflare’s Privacy Policy, its Turnstile Privacy Addendum, Resend’s Privacy Policy, and Google Fonts’ privacy explanation.

We share information as needed for these services, to respond to lawful requests, or to protect the security and rights of our users and business. Providers may process information in the United States and other countries where they operate.

How long we keep information

• Active waitlist profiles and linked campaign categories: up to 24 months from signup or an explicit rejoin.
• Unsubscribed profiles and verified deletion requests: contact and profile details are removed from the active website database within 30 days.
• Application email-job and delivery-event details: up to 30 days.
• Aggregate website activity: up to 90 days. Temporary event receipts expire after 24 hours and application abuse-control records after 20 minutes, then are removed by routine cleanup.

We keep a minimal protected lookup record derived from your email address, with a reason and date, for as long as needed to honor opt-outs, deletion requests, complaints, and sending restrictions. This allows us to recognize an address that should not receive updates after its contact profile is removed. We treat this as protected information and use it only for these restrictions.

Backups and other copies

We make private hourly recovery copies with seven days of history. Cloudflare also maintains separate database recovery history for up to 30 days. Removed data may remain in these restricted recovery copies until they expire; scheduled storage cleanup can take additional processing time. Before restored data is used, current opt-outs and deletion restrictions must be reapplied.

Delivered emails, private exports, and provider-held records have separate lifecycles. We address copies under our control when handling a verified request. Resend normally retains email and log data for 30 days and maintains separate backups. Deleting a website record does not erase a message already delivered to your inbox.

Your choices and requests

Use the unsubscribe link in our welcome email to stop future pilot and availability updates, or email admin@cstorescanner.com. You can also ask to access, correct, receive a copy of, or delete your information. We may verify that you control the relevant email address before disclosing or changing records. You do not need a website account to make a request.

Depending on where you live and the law that applies, you may have additional privacy rights. If we decline a request, you can ask us to review the decision by replying with “Privacy appeal.” We will explain the outcome and any further options available under applicable law.

Protecting information and updates to this notice

We use HTTPS, restricted administrative access, encrypted storage, and submission checks to protect information. This website is intended for business owners and their store teams; it is not directed to children under 13.

We will update this notice when our practices change and revise the date above. If a change requires a separate notice or consent, we will provide it.