Privacy
Last updated 2026-09-03. This page describes what the operator of this service stores in the cloud for Dummie's Utilities and the store-side apps, and what it does not.
The short version
The cloud holds what it needs to bill you, know which devices are yours, show your scratch-off grid on your TV, and keep a few encrypted backups. It never receives your point-of-sale sales, your POS passwords, or your check-cashing customers. Your data is yours and you can export or delete it.
What the cloud stores
| What | Details | Kept for |
|---|---|---|
| Account identifiers | store name, contact e-mail, phone (if given), Stripe customer id, a hashed store key. | life of the account |
| Entitlements | which modules and how many screens/seats are paid for, paid-through dates, subscription status. | life of the account |
| Device records | a hardware id, device kind, a label you chose, app version, hashed device tokens. | until the device is removed |
| Scratch-off grid blob | box, game number, game name, price, next ticket, tickets left, last three digits of a pack number, sold-out flag. | newest only; replaced on every publish |
| Encrypted snapshots | lottery database backups (encrypted on your PC with a key we never see), grid blobs, and — only if you opt in — Commander configuration (PLUs, prices, groups, promotions, fuel, taxes) encrypted per store. | newest 5 of each kind |
| Timestamps and IP addresses | the last check-in time and IP address of each of your devices, and the audit trail of pairing, billing and admin actions. | life of the account; deleted on request |
What never reaches the cloud
- Point-of-sale sales, transactions, journals or totals.
- Commander (POS) credentials, or any other password.
- Check-cashing customers: IDs, names, checks, images, addresses, or anything from a scanned ID.
- Lottery ticket serial numbers in any form we can read — the grid blob carries only the last three digits of a pack number, and full serials exist only inside a database backup your own PC encrypts before it is uploaded (see Snapshots), which we store but cannot decrypt.
- Screenshots, keystrokes, or telemetry beyond an optional, off-by-default health ping that carries only fixed status codes.
The cloud never connects into your store. Your PCs and the bridge appliance call out to the cloud; nothing on our side can open a connection to your network.
Snapshots and encryption
- Lottery database backups are encrypted on your PC with a key generated there and shown to you once as a recovery phrase. We store the encrypted file and cannot read it. If you lose the phrase, we cannot recover the backup for you.
- Grid blobs are stored as-is; they contain only what your TV shows.
- Commander configuration snapshots are opt-in. When enabled, each store's snapshots are encrypted with a key we hold for that store so you can restore from the website. They contain prices and configuration only — never sales, never credentials.
Timestamps and IP addresses
We store the most recent check-in time and IP address for each of your devices — one line per device, overwritten on every check-in, not a history of every poll — and an audit trail of pairing, billing and admin actions. This is how we tell you a screen went dark, spot abuse, and answer "what happened" questions.
These records are kept while your account is open and deleted on request; no scheduled deletion job runs on this server. Remove a device and its record goes with it.
Separately, the web server writes an ordinary request log (time, IP, path, status) which our hosting keeps for a short rolling period for security and debugging. It is not linked to your account and is not covered by the retention above.
Optional health reports
PC apps can send a small health ping (disk-low, scanner-missing, and similar fixed status codes) so we can warn you before something fails. This is off by default and carries no free text, file names, or data.
Payments
Card details are entered on and stored by Stripe; we never see your card number. We keep the Stripe customer and subscription ids needed to link payments to your store.
E-mail and your store key
We e-mail the account contact about billing, outages affecting your store, and changes to these pages. We do not send marketing e-mail.
Your store key is stored only as a hash, shown to you once when it is created or rotated, and is never sent by e-mail or placed in a link.
Your rights
You can export your data from the apps at any time, and download the snapshots we hold from the website. If you close your account, ask us to delete your snapshots and account identifiers and we will do so within 30 days of your request; until then they follow the retention above (Stripe keeps its own payment records as the law requires). To ask a question or request deletion, use the support contact on your account.