What the camera sends, and what we keep.
Scanning works without an account and most of looka runs in your browser. This page says exactly what leaves it.
Last updated
What leaves your browser when you scan
The camera runs in your browser. The video itself never goes anywhere: looka reads frames out of it locally and sends two small images to our server for each scan.
- The crop inside the guide brackets, which is the card and nothing around it.
- A magnified strip of the bottom edge of that crop, which is where the collector number is printed.
Our server uses them to work out which card it is and to search for sold listings. It doesn't store them: they live in memory for the length of the request and are gone when the answer comes back. What's outside the brackets, including the rest of your room, is never sent.
Your scan history
A scan is worth keeping after the card has left your hand, so looka keeps a small thumbnail of the crop with the card name and the median at that minute.
- Signed out: the last three scans are stored in your own browser, in localStorage. They never reach us. Clearing your browser data clears them.
- Signed in: your scans are stored in our database so they follow you between devices, and you can delete all of them at once from your account page. Deleting is immediate and there's no undo.
Signing in
Signing in is optional. Scanning works without an account, and the only way in is Google. We never see your Google password.
From Google we store your name, your email address and your profile picture, plus which tier your account is on. We use the email to recognise you and to contact you about your account; we use the name and picture to show you who is signed in. A cookie in your browser keeps you signed in and does nothing else.
Analytics
We use PostHog to count how the product is used: pages opened, scans completed, how long a scan took, whether the card resolved, which marketplace a link went to. It's tied to your account id when you are signed in, and to an anonymous id when you are not.
PostHog derives an approximate location from your IP address, roughly city level. The captured image, the title of any listing and the URL of any listing are never sent to it.
Prices and links
Prices come from public listings on marketplaces such as eBay, TCGplayer, Cardmarket, Goldin and PWCC. Some of the links to those listings are affiliate links, which means we may be paid a commission if you buy through one. That never changes which listings we show you or what order they are in.
What we don't do
We don't sell your data, and we don't share it with anyone beyond the services that run looka: our hosting, our database, Google for sign-in, and PostHog for analytics. There's no advertising on looka and no advertising network in it.
Getting your data out, or deleting it
Your scan history is deletable from the account page at any time. To delete your account itself, or to ask for a copy of what we hold, write to deep@desquaredp.com and we'll do it. Deleting the account deletes the scans attached to it.
Changes, and how to reach us
If this policy changes in a way that matters we'll change the date at the top and, for anyone signed in, say so by email. Questions about any of it go to deep@desquaredp.com.