Privacy Policy

Overview

InventoryKing ("we", "us", "our") is a hardware inventory management tool. We believe in keeping things simple: we collect only what is necessary to run the service, we do not track you, and we do not sell your data to anyone.

Information we collect

Account information

When you create an account, we collect your name and email address. Your password is cryptographically hashed and cannot be read by us or anyone else.

Inventory data

You provide inventory information such as device names, serial numbers, manufacturers, models, purchase details, assigned persons, notes, and other fields. This data belongs to you and is stored solely to provide the service.

Passkey credentials

We store WebAuthn public key credentials for passkey authentication. Private keys never leave your device.

Information we do NOT collect

• No analytics or tracking scripts (no Google Analytics, no pixels, no fingerprinting)
• No advertising identifiers
• No behavioral tracking across pages
• No data sold or shared with third-party advertisers

Cookies

We use two cookies, both strictly functional:

• Session cookie — keeps you logged in. It is HTTP-only and cannot be accessed by JavaScript.
• Appearance cookie — remembers your light/dark theme preference.

We do not use any marketing, advertising, or tracking cookies.

Local storage

We store a single appearance key in your browser's local storage to persist your theme preference. No other data is stored client-side.

Third-party services

We use SparkPost to send transactional emails (email verification, password resets). SparkPost processes your email address solely for the purpose of delivering these messages. We do not use any other third-party services that receive your data.

Data retention

Your data is retained for as long as your account exists. If you delete your account, your personal information will be removed. Inventory data associated with a company may be retained if other members still have access to that company.

Data security

We use passkey (WebAuthn) authentication, hashed passwords, HTTPS encryption in transit, and standard Laravel security practices including CSRF protection and HTTP-only session cookies.

Your rights

You can:

• Access, update, or delete your account information from your settings page
• Export your inventory data at any time
• Request deletion of your data by contacting us

Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page. We encourage you to review this page periodically.

Contact

If you have questions about this privacy policy, contact us at [email protected].