eComicIQ

Privacy Policy

Effective August 5, 2026

eComicIQ ("we", "us") is a comic book scanning and inventory tool. This policy explains exactly what we collect, where it goes, and what you can make us do about it. It is written to be specific rather than reassuring.

1. What we collect

Account information

• Email address — your login identity and how we send password resets.
• Password — stored only as a bcrypt hash (cost factor 12). We never store the password itself, and nobody at eComicIQ can read or recover it. If you lose it, it can only be reset, never retrieved.
• Subscription status and the identifiers Stripe assigns to you.
• Last sign-in time.

We do not ask for your name, postal address, phone number, or date of birth.

Content you create

• Photographs of comics you scan, and the details we derive from them (title, issue number, publisher, condition, estimated value, your notes and prices).

Payment information

Payments are processed entirely by Stripe. Checkout and the billing portal are pages hosted by Stripe, not by us. Your card number never reaches our servers and we never store it. We keep only the customer and subscription identifiers Stripe gives us, so we know whether your subscription is active.

Technical information

• IP address — held briefly in memory to rate-limit failed sign-in attempts. This is what stops someone brute-forcing your account.
• One essential cookie (eciq_sess) that keeps you signed in. It is HttpOnly, Secure, and SameSite-restricted. We use no advertising, analytics, or cross-site tracking cookies.

2. Who else receives your data

We do not sell your data or share it for anyone else's marketing. We rely on these service providers to run the product, and only for that purpose:

Provider	What it receives	Why
Anthropic	The comic photos you scan	AI identification of the comic. Photos are sent for processing and are not used to train models.
Stripe	Email, payment details you enter on Stripe's own page	Subscription billing
Cloudflare	Your comic photos; traffic to the site	Image storage and delivery, and securing the connection
eBay	Comic titles and issue numbers — no personal data. For a book whose title we could not read from the cover, that cover photo is also sent to eBay's image search	Market price lookups, and finding the matching listing for covers with no printed title
Google (Gmail)	Your email address	Sending password-reset messages

Comic reference data (series, issue, barcode and creator information) comes from the Grand Comics Database™ and is used under the Creative Commons Attribution-ShareAlike 4.0 license. It contains no customer data.

We may also disclose information if legally required to, or to protect the safety and rights of our users.

3. Image links

Comic images are served from img.ecomiciq.com under long random filenames that cannot be guessed. This is deliberate: it lets your photos appear in listings you publish to marketplaces such as eBay. Anyone holding a specific link can view that image, so treat a link as you would the photo itself.

4. How long we keep it

• Account data — for as long as your account exists.
• Scans and photos — until you delete them or ask us to close your account.
• Backups — encrypted backups are retained on a rolling basis and age out automatically. Data you delete may persist in a backup for a short period before being overwritten.
• Billing records — retained by Stripe under their own policy, as tax and accounting rules require.

5. Your rights

Wherever you live, and regardless of any legal threshold, we will honour these:

• Access — get a copy of what we hold about you.
• Export — export your inventory from within the app at any time.
• Correction — fix anything inaccurate.
• Deletion — have your account and your scans permanently deleted.
• Cancel — cancel your subscription at any time from the billing portal.

Email [email protected] and we will action requests within 30 days. Deletion is currently handled manually by a human, so it is not instant — but it is permanent, and it covers your scans and photos as well as your login.

We will never charge you, degrade your service, or refuse you access for exercising any of these rights.

6. How we protect it

• Passwords hashed with bcrypt (cost 12) — never stored in readable form.
• All traffic encrypted with HTTPS, which is enforced rather than optional.
• Session cookies are HttpOnly and Secure, so scripts cannot read them.
• Sign-in attempts are rate-limited per account and per network address.
• Every request is checked against your own account, so one subscriber's inventory cannot be served to another.
• Database backups are encrypted before leaving the machine.

No system is perfectly secure, and we will not pretend otherwise. If we ever discover a breach affecting your personal information, we will tell affected users directly and promptly rather than quietly.

7. Children

eComicIQ is not intended for anyone under 16, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

8. Changes

If we change this policy in a way that materially affects your rights, we will notify subscribers by email rather than silently changing the page. The effective date at the top always reflects the current version.

9. Contact

Questions, or a privacy request: [email protected].