CHOIL · PRIVACY

Privacy.

Last updated June 2026

The short version

CHOIL, operated by Airglow LLC (Kansas), is a private vault for your collection. We store what you put in it, use it only to run the app, never sell it, and let you delete it. We don't run ad trackers.

What we collect

Account: your email and/or mobile number, used only for passwordless sign-in and notifications you opt into.
Your collection: the items, specs, prices, notes, photos, and receipts you add. Receipts are stored in private storage and served only to you via short-lived signed links.
Profile: handle, display name, bio, and avatar you choose to share with friends.
Security log: we record security, admin, and destructive events (logins, role changes, deletions, exports) with an anonymized IP (last segment dropped) and device string, retained for 90 days, then auto-deleted. We do not log routine browsing.

AI processing

Valuation, photo identification, and spreadsheet import send the relevant item details (and, for identification, the photo) to AI models through the Vercel AI Gateway. We send only what's needed for that feature and don't use your data to train models.

If you use the Snipe browser extension

Snipe is our optional browser extension that shows live market value while you watch knife and EDC auctions on Whatnot. It runs entirely in your own browser:

What it reads: the current lot's title and bid from the auction page you're viewing, sent to CHOIL only to look up a valuation. It never places bids, acts on your behalf, or scrapes Whatnot in the background.
Video frames: only when you click "Identify from video," it captures the current frame and sends it to our photo-identification feature. Frames are processed in the moment and not retained.
How it signs in: a revocable token you generate from your CHOIL account — not your password or cookies. Revoke it anytime from your account.
What it stores on your device: that token and the overlay's position, in the browser's local extension storage.

Snipe is an independent buyer's tool and is not affiliated with Whatnot.

Cookies

We use a single first-party cookie to keep you signed in. No advertising or cross-site tracking cookies.

Sharing

Your vault is private by default. Collections are shared only when you accept a friend and explicitly enable a comparison. We use a few processors to run the service — Supabase (database/auth/storage), Vercel (hosting/AI gateway), Resend (email), and Telnyx (SMS) — and share only what each needs to function.

Your control

Edit or delete any item anytime — and you don't have to delete your account to remove data; see choil.app/data-deletion. Export your whole collection to CSV from the vault. Sign out of all devices from Settings. To delete your account and everything in it, use Settings → Delete account in the app, go to choil.app/account/delete, or contact us from the support page.

Contact

Questions about your data? Reach us via the support page or at support@choil.app.

CHOIL · operated by Airglow LLC (Kansas) · choil.app