Privacy
Lot Warrior stores the book you build so it is still there on the next phone. This page says what that is, who else sees a piece of it, and how you take it back.
What we store
Account: your name, email, a password hash if you set a password, and sign-in sessions. A recovery code is stored only as a hash. The plain code is shown once and is not kept.
Your book: dealerships you save or add, status, private tags, contacts, visit notes, follow-up dates, problem reports, and saved routes. That book is tied to your account.
On this phone only: named territories, the last hunt, and a cache so notes still open with no signal. Those are included when you export all data. They are not a continuous location history.
Location is read only when you tap a location button or search. It is used to center a hunt. A route you save can include that start point.
Who else receives data
There is no in-app billing and no card processor. Password recovery is the code you write down, not a reset link. Lot Warrior does not email you about your account.
Searches and maps talk to:
OpenStreetMap tiles and data. Nominatim for place lookup. Overpass for rooftop listings. Photon (Komoot) for place and name search. The US Census geocoder and TIGERweb for ZIP shapes. Yellow Pages and Mapdoor pages, fetched by the server, for store names the map missed. OSRM at router.project-osrm.org for drive times.
Apple Maps, Google Maps, and Waze open only when you tap those buttons. You leave Lot Warrior, and those apps get the stop you chose.
Google Analytics, measurement ID G-83NJT35LH3, may receive a page view. Google or X sign-in goes through the Grok sign-in broker. The account itself is stored with Better Auth in this app’s database.
A note from “Found something stupid?” is stored here and emailed to lotwarriorapp@gmail.com through FormSubmit (formsubmit.co). That service sees the message, the page, the device string, and the account email if you were signed in. It does not see the rest of the book. The first time, FormSubmit emails that inbox a confirmation to accept, and it keeps form mail for about 30 days.
The owner, signed in as lotwarriorapp@gmail.com, can open an admin desk. It lists accounts, when they joined, last sign-in, an estimate of time signed in, counts of lots and visits, closed accounts, and bug notes. It does not show passwords, recovery codes, or the text of visit notes.
Your copy, and deletion
Account has Export all data. That downloads a restorable backup plus spreadsheets of dealers, contacts, notes, follow-ups, and routes. Signing in on another phone also pulls the book down. This phone keeps a copy if the signal drops. There is no separate nightly email backup.
Account also deletes the account. Type DELETE. That removes the user, sessions, password, recovery code, notes, contacts, saved lots, reports, and routes from the database, then clears the copy on this phone.
Updated September 24, 2026.