Privacy Policy

Last updated September 20, 2026

OttoCart is an invite-only web app that helps you track what groceries you have at home and builds your King Soopers or Kroger cart through the Kroger API. It is operated by 303 Analytics. This page explains what OttoCart stores, why, and the choices you have.

What we collect

• Your Google account basics. When you sign in with Google we receive your name, email address, and Google's account identifier. We use them only to sign you in and to show you which account you're using.
• Your grocery list and settings. The items you add, how many you have on hand, reorder levels, items you skip, items you watch for sales, preferences such as brands, search terms or an exact product, and whether deal alerts are on.
• Your count history. The counts you enter, one per item per day, kept for a year so OttoCart can learn how fast you use things and suggest counts when you start over. Only numbers you type or tap are kept — never predictions, and nothing from Kroger. Deleting an item deletes its history.
• Your recipes. Recipes you save: the title, ingredients, tags and notes, plus the link to the page you imported it from. When you import from a web address, OttoCart's server opens that one page to read its ingredient list; the site sees a request from OttoCart, not from you. A website's written instructions aren't copied — you open the original for those.
• Your meal plan. Which recipes you plan for the week, the servings, and when they were ordered or cooked, until you start a new week or remove them.
• Your meal history. When you tap Cooked, the recipe, the date and the servings, kept for a year so OttoCart can show when you last made something and suggest meals from your own recipes. It comes only from your taps — never from what's in your Kroger cart. Deleting a recipe deletes its history.
• Your home store. The King Soopers or Kroger store you pick, stored as the store's ID, chain, name, and address as Kroger provides them. We don't store the ZIP code you search with or your location.
• Your Kroger connection. If you connect Kroger, we store the access tokens Kroger issues so OttoCart can look up prices at your store and add items to your cart. We don't receive your Kroger password, and we don't request access to your Kroger profile.
• Your current order. The order you're reviewing (the matched products and their prices at your store) is kept only until those items are added to your cart or you shop again. The list of what was added is shown to you at the time and not kept; OttoCart keeps only the date of your last order, to estimate what you have. It doesn't keep a history of prices or of your cart.
• Invite and account records. Which invite created your account, when you signed in, and basic account events. Invite codes are stored only in scrambled (hashed) form.
• How many times OttoCart called Kroger for you each day. A number per day, kept for 13 months, so the app can stay under Kroger's limits and warn you before it's reached. Not what was searched for or what went into your cart.
• A barcode you scan. The camera runs on your phone and its picture is never sent; only the barcode's digits go to OttoCart, which looks the product up at your store and doesn't keep the digits.
• Which parts of OttoCart you use, by day. A count per day of the days you opened it, counts you entered, Shop runs, orders sent to your cart, meals planned or cooked, and recipes saved. Numbers only — never which items, products or recipes, and never a time of day. Kept for 13 months in OttoCart's own database and used only to see what's worth improving.

How we use it

Only to run OttoCart for you: sign you in, keep your list, find products and prices at your store, and add the items you approve to your store's cart. We don't sell your information, show ads, or use any third-party analytics or tracking service.

Google user data

OttoCart's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only your basic profile and email address, and we don't share Google user data with anyone.

Sharing

Your list and store are sent to Kroger when OttoCart searches for products or adds items to your cart; Kroger's own privacy policy applies to that data. Otherwise we share information only if the law requires it. OttoCart is not affiliated with Kroger, King Soopers, or Google.

Cookies and browser storage

OttoCart uses one cookie to keep you signed in (for up to 30 days of inactivity). Your browser also keeps a copy of your counts and skipped items, and a few display preferences, such as whether you dismissed the Kroger prompt; these are cleared when you log out. There are no advertising or third-party cookies.

Storage and security

Data is stored on a server in the United States and sent only over encrypted (HTTPS) connections. Access is limited to the operator. No system is perfectly secure, but we keep what we store to what OttoCart needs.

Your choices

• Disconnect Kroger at any time from the app's menu. This deletes your stored Kroger tokens. You can also revoke access from your Kroger account settings.
• Remove OttoCart's access to your Google account at myaccount.google.com/permissions.
• Ask us to delete your account and all of its data by emailing jason@303analytics.com. We'll confirm when it's done.

Children

OttoCart isn't intended for anyone under 13, and we don't knowingly collect their information.

Changes

If this policy changes, we'll update the date above. Significant changes will be noted in the app.

Contact

Questions or requests: jason@303analytics.com.