Privacy Policy

Old POS — Free Point of Sale · Last updated: October 10, 2026

In short: your shop data is kept in your own Google Drive (with a working copy cached on your device). Old POS has no backend server; we do not see, collect, or sell your data. Signing in with Google is optional — if you do, backups go only to a hidden app folder in your own Google Drive.

1. Who we are

Old POS is a free, browser-based (PWA) point-of-sale application built and operated by Old POS. App URL: https://oldpos.github.io/. Contact: mehedi.exx@gmail.com.

2. What data is stored and where

Everything you enter — products and stock, sales and receipts, customer names/phone numbers/addresses and credit balances, suppliers, purchases, expenses, shop name/address/phone, settings, and a one-way hash of your PIN (not the PIN itself) — is stored in your browser's local storage on your device. This data is not sent to any server operated by us. We use no analytics, advertising, or tracking tools.

3. Sign in with Google and Drive backup (optional)

You may sign in with Google to enable automatic cloud backup. The app requests the following access:

Scope	Purpose
`openid`, `email`, `profile`	Show your name, email and picture in the app and identify which account is connected.
`drive.file`	Create and update one visible backup file (`EsyPOS-Backup.json`) in your Google Drive that contains your shop data. This scope only reaches files Old POS itself created; it cannot see any other file.
`drive.appdata`	Store and restore a backup file (`esypos-data.json` and dated snapshots) in the hidden application-data folder of your Google Drive. This scope does not let the app see, read, or modify any other file in your Drive.

The backup contains your app data (including customer details) and travels directly from your browser to your Drive. No server of ours sits in between; we cannot access or view this file.
The Google access token is kept only for the current browser session (sessionStorage) and is valid for about one hour. It is revoked when you sign out.
Google user data is not used for advertising, profiling, or marketing, and is not sold or transferred to anyone.
Old POS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Camera and Bluetooth

Camera: used only while scanning barcodes. No video or image is recorded, stored, or transmitted; the camera is released when scanning ends or the app goes to the background. Product photos you add are resized and kept only on your device.
Bluetooth: used only to send a receipt to the printer you select.
Both rely on browser permissions you can revoke at any time.

5. Third-party services

Fonts and icons are bundled with the app, so no font or icon service is contacted. The services below, may receive your IP address and browser details when you use them (their own policies apply):

Google Identity Services and Google Drive (sign-in and your private backup) — Google
User counter (only if the owner enables it) — a random anonymous ID, with no name, phone, shop or sales data, is stored in the owner's Firebase database so the app can show how many people use it
App hosting — GitHub Pages

When you share a receipt or reminder via WhatsApp or SMS, the corresponding app on your device opens with a prepared message; sending is your decision and that message is then governed by that service's policy.

6. Local storage and cache

To work offline the app uses browser local storage and a Service Worker cache. These are not advertising cookies; they exist only to run the app.

7. Security

The PIN lock is a convenience screen lock, not encryption. Browser data and backup files depend on your device's own protection — please use a device screen lock.
Backup (JSON) files contain all your data; keep them in a safe place.
No system is completely secure; we take reasonable care but cannot guarantee absolute security.

8. Your controls and deleting data

Device data: Settings → Data management → "Delete all data", or clear the site's data in your browser.
Google connection: Settings → Google Drive cloud backup → "Sign out". You can also remove Old POS's access at myaccount.google.com/permissions.
Backup in Drive: in Google Drive → Settings → "Manage apps", delete Old POS's hidden app data, and delete the file EsyPOS-Backup.json from My Drive.
Because we hold none of your data, there is nothing for us to delete on our side; contact us by email if you have questions.

9. Your customers' information

You decide what customer details to record for your shop's bookkeeping, and you are the controller of and responsible for that information. Use it accurately and lawfully. Old POS only stores it on your device as a tool.

10. Children

Old POS is for businesses and is not directed to children under 13; we do not knowingly collect children's data.

11. Changes to this policy

If we change this policy we will publish the update on this page with a new date. Continued use after a material change means you accept the updated policy.

12. Contact

Old POS · Email: mehedi.exx@gmail.com · Website: dhakasmm.com