What we keep
The short answer is: as little as we can get away with. The long answer is this page, and every line of it describes something the software actually does.
Three things, before the detail
No cookies until you say yes
Your own choices are kept in your browser — light or dark, and your answer about cookies — and nothing else is, until you say yes. Our own counting sets no cookie, and no advertising network is watching you here. If you accept Analytics on the cookie notice, Google Analytics runs too, and it does set cookies; you can change that answer any time from Cookies in the footer.
Your shop’s data is your shop’s
Sales, products, customers and reports belong to the shop that made them. We never sell them, and we never use one shop’s figures to sell anything to another.
We hold no card numbers
This website takes no payments at all, so there is nothing here to store. In the till, a card is recorded as a way a bill was settled — the number stays with the machine that read it.
Counting readers without following them
We count page views on our own server. There is no cookie, no advertising tag and no third party in that count. Google Analytics is separate: it runs only after you accept Analytics on the cookie notice.
To tell one reader from another for a day, the server makes a one-way mark out of your network address and your browser’s description, mixed with a secret that changes every day. The address itself is never written down, the mark cannot be turned back into it, and today’s mark does not match yesterday’s — so it cannot follow you from one day to the next.
If your browser sends “Do Not Track” or Global Privacy Control, you are not counted at all. Robots are not counted either. What is left — a page, a language, a rough device size and where the link came from — is deleted after 400 days.
- No cookies from our own counting
- Your IP address is never stored
- Do Not Track and Global Privacy Control are obeyed
- Counts are deleted after 400 days
When you ask us to call you
The form asks for your name and a phone number, because a phone number is how a shop in Cambodia is actually reached. An e-mail address is optional. Everything else the form asks is optional too, and it is there to make the call useful rather than to build a profile of you.
If you give an address that could never receive mail, we drop it rather than keep something we cannot write to, and the page tells you we have done so. What you send arrives with the team in Siem Reap as a message, so that someone sees it the same day. We use it to answer you. We do not sell it, and we do not add you to a list you did not ask for.
- A name and a phone number; the rest is optional
- An address that cannot receive mail is not kept
- Used to answer you, nothing else
- Never sold, never passed on
What the app holds, and how
To run a till we hold what a till needs: your products and prices, the sales your staff make, the payments against them, your stock, your customers if you keep them, and who did what. Your staff’s logins sit beside them.
Passwords are stored as an Argon2id hash, which is a one-way scramble built to be slow and expensive to attack — we cannot read yours, and neither can anyone who steals the file. PINs are held the same way. Every shop’s rows carry its own mark and the database itself refuses to hand one shop’s rows to another.
When you want it back, you can have all of it: the back office writes out every table of your shop as one export, or as a spreadsheet per table.
- Passwords and PINs are stored one-way, never in the clear
- One shop can never read another’s rows
- Every table of your shop can be exported
- Nothing is sold, shared or used to advertise
Do you use Google Analytics?
Only if you say yes. Our own counting runs on our server, without cookies and without names. Google Analytics and Google Tag Manager load only after you accept Analytics on the cookie notice — until then nothing on this website talks to Google — and you can change your answer any time from Cookies in the footer.
Can you see my sales?
We can reach your shop’s data when we are fixing something you have asked us to fix, and the system records that it happened. We do not read a shop’s figures for any other reason.
What happens to my data if I stop?
Nothing is deleted the moment you go. Ask for it and we write out every table of your shop, as one export or as spreadsheets. Ask us to delete it and we will.
Do you store my customers’ phone numbers?
Only if you put them in. A customer list is something a shop chooses to keep, and it belongs to the shop, not to us.
Is this the final wording?
It is the honest wording, not the final one. A Cambodian lawyer reads these pages before BrownPOS is sold widely, and if the law needs different words we will use them and say what changed.
Want something here deleted, or explained?
Ask us. A person in Siem Reap reads it and answers — in Khmer or in English, whichever suits you.