Privacy
Short version: no account needed, no ads, no tracking cookies, nothing sold. We keep the tickets you save, a log of what you do in Xeso to make it better, and your email only if you sign in. You can delete everything from the Account page.
Without an account
When you save a ticket, your browser gets a random anonymous ID (a cookie) so you can find your tickets again. We don't know who you are.
If you sign in
Signing in is optional. We keep your email address, and with Google also the name Google shares, only to sign you in and keep your tickets on every phone. If you choose a password, Supabase stores it scrambled (hashed): nobody at Xeso can read it. If you turn on result emails in Account, we email you when your saved tickets are drawn, one email per evening at most, and you can turn them off at any time. We never email you anything else without asking.
What we keep
- The tickets you save: number, province, draw date, series, result, the text the scanner read, and what you tell us you did with a prize (cashed, tipped, given away).
- What you do in Xeso once you have an anonymous ID or an account: pages you open, tickets you check, scan or save, taps on Share (not what you send or to whom), signing in and out. It is linked to that ID, kept 180 days, and only used to understand how Xeso is used and fix what doesn't work.
- Anonymous counters for the About page: one count per ticket checked or scanned, with no link to you.
- To stop abuse, how many scans each visitor and each network made today. The network's IP address is turned into a code that can't be reversed, and is deleted after 7 days. Limit: 10 scans a day without an account, 30 when signed in.
Ticket photos
A photo you scan is sent to Google Cloud Vision to read the text, then thrown away. Xeso does not store your photos. The text read from a ticket can stay in our server logs for a short time to improve the scanner.
Who handles it
Supabase (database and sign-in), Vercel (hosting, and Vercel Web Analytics to count visits without cookies), Google Cloud Vision (reading tickets) and Resend (sending emails), on servers in India and abroad. Fonts are served by Xeso itself. We don't sell or share your data with anyone else.
Delete your data
On the Account page, tap delete: your account or anonymous ID, every ticket saved with it and its activity log are removed for good.
Last updated 10 October 2026.