DeePonyCap privacy
Effective: 14 October 2026 · Published by Capricorn Systems, Karachi, Pakistan
DeePonyCap works on your device. We don't have accounts, analytics, ads or tracking, and we don't sell data.
What stays on your device
- Collection (names, photos, shelves, wishlist, accessories) in localStorage / IndexedDB.
- Optional parent PIN (stored as a hash on device only).
- Preferences (theme, collector mode, haptics).
- Camera / photo-library access only when you choose to add a photo; images stay local.
- Haptics use the browser Vibration API locally after a user gesture (never sent to a server).
What leaves your device
Nothing for collection data, sync, or analytics. CSP connect-src 'self' — no third-party APIs.
| Service | What is sent | Why | When |
|---|---|---|---|
| GitHub Pages (static host) | Normal browser request metadata for HTML/JS/CSS/icons | Serve the PWA | First visit and when the service worker refreshes cached assets |
After first load, the app works offline via the service worker. No cloud backup unless you export a file yourself.
Your controls
Export / import / erase from Settings. Optional Parent Lock PIN can gate export, import, and delete. Clearing site data removes local copies.
Children
DeePonyCap is intended for a general audience aged 13 and over. Parents can enable an optional Parent Lock PIN; supervise exports and device sharing.
Independence
DeePonyCap is an independent collection tracker and isn't affiliated with or endorsed by any toy company.
Changes
We'll update this page and its effective date if anything changes.
Contact
Support · GitHub Issues · No personal support email (G-4).