That is the short version. What follows is the long one — what we hold, where it lives, who else can see it on the way, how long we keep it, and how to make all of it go away.
This page covers Stocktakes Online: the portal, the scanner app and this website. Barcode Datalink's own site has its own statement for enquiries and hardware, because that is a different kind of data.
No analytics, no tracking pixels, no advertising tags, no chat widget, no session recording. Nobody pays us for what you looked at and we are not building a picture of you.
Every typeface, script and image on this site is served from this site. Nothing is fetched from anybody else's server as a page loads — the fonts used to come from Google and no longer do, because that handed Google the address of every visitor for no benefit to you.
Two things here are not ours, and it is better that we name them than that you find
them. One cookie is set — __cf_bm, by
Cloudflare, which tells robots from people and lasts about half an hour. And Cloudflare
scrambles our email address in the page so scrapers cannot harvest it, which puts one
small script here that we did not write. That is the lot. Open your browser's developer
tools and you will find exactly those two and nothing else, which is the only reason it
is worth saying.
The portal at app.stocktakesonline.com.au keeps two things in your browser, and neither is a tracker. A signed token that keeps you signed in for eight hours and is gone when it expires. And which product's sign-in screen to show you, so a bookmark opens the one you expect — a single word, no identifier, nothing that says who you are. The scanner app stores the company and site name from the last successful login so a scanner at a fixed warehouse does not have them retyped every shift — never a username, never a password, and nothing a count depends on.
More than most software you will sign up for, so it is listed rather than summarised.
Part numbers, barcodes and descriptions. Bin locations and site names. Every count, with its quantity. Stock levels are commercially valuable — what you hold and where is worth something to a competitor, and we treat it that way.
A username, a display name and an email for each person, and a hashed password or PIN. Every count carries who made it and at what minute, because that is what makes a figure answerable. It is also information about your staff, and worth knowing you are holding it.
Read off the device label so a count can be traced to the machine that made it. Only the last four characters are ever shown on screen. No location, no phone number, nothing about the person holding it.
An enquiry from this website is your name, company, email, phone if you give it, and what you wrote. It goes to Formspree, reaches us as an email, and Formspree keeps it for 30 days. If you do not become a customer that is the end of it — it is never added to our accounting system and never used for anything else.
DigitalOcean's Sydney region, on managed PostgreSQL — encrypted on disk and encrypted in transit, with automated nightly backups and point-in-time recovery. Your data is not copied to another country.
We do not run a separate server per client, and we would rather say so than let you assume otherwise. Every read is scoped to your company by the database itself, from the signed token — the scanner never sends a company id, so a device cannot reach another client's data by guessing one.
Cloudflare answers DNS for our domain, carries our mail and serves this website. DigitalOcean run their own platform behind Cloudflare as well, so a Cloudflare edge — in Sydney — passes the portal's traffic through too. Traffic passing through is not the same as data held: your parts, counts and operators live in the database, not with them. We would rather say this than have you find it in a response header.
Your administrators decide who in your company has a login and what they can reach.
And we can. Barcode Datalink holds a provider account that can open any client company, because that is how we set you up, load your first parts file, reset a locked-out administrator and answer the phone on a count day. There is no technical way to give you the product without it, so rather than leave you to discover it: one person here can see your data, and that person is Andrei Spiegel. Nobody else has an account.
We do not look at your figures for any other reason, we do not aggregate them, and nothing about your stock is ever shown to another client or used in our own marketing without asking you first.
Closed stocktakes stay reportable, because a report on a finished count is the one most often wanted — sometimes months later when an auditor asks. We do not put a clock on that; you decide when it goes.
An administrator can remove your parts, bin locations, stocktakes and every count from the portal, by typing an exact phrase and confirming twice. It takes about a second and the page shows you the numbers first.
What a stocktake cost and when it happened — a company name, a date and an amount. No part numbers, no bin locations, no counts. Kept as long as the law requires records of a sale.
Deleting really is deleting, and that cuts both ways. It removes the stocktakes, so there is no archive and no undo — not for you and not for us. Download your reports and your CSV exports before you press it, because we cannot get them back for you afterwards.
One honest footnote: deleted rows linger in the nightly backups for a short period before those roll off, which is a property of having backups at all. They are not readable by anyone but us, they are never restored selectively, and they age out on their own.
If you want the company and the logins gone as well, not just the data — a closed account rather than an empty one — ring us and we will do it and confirm when it is done.
Only a scrypt hash of one, which is memory-hard on purpose: a stolen hash cannot be attacked with rented graphics cards the way an older scheme can. We could not tell you your password if you asked, which is why a forgotten one is reset rather than looked up.
Per account, so somebody guessing at one login cannot simply keep guessing. Sessions are signed tokens that last eight hours. Everything is over HTTPS; the scanner app refuses to send a password over anything else.
Nobody honest says that. What we will say is that the surface is small, that the portal itself loads no code from anybody else at all, and that if something did happen to your data we would tell you — quickly, in plain words, and before you read it somewhere else.
Want a copy of everything we hold for you, want it corrected, or want it gone? Ring 0414 53 53 95 or email [email protected]. There is no ticketing system and no form to fill in for this — it is one person, and he answers.
Write to us at Barcode Datalink Pty Ltd
12 Preston Way, Berowra NSW 2081.