ScanSheet
Is browser-based barcode scanning safe?
Browser-based barcode scanners ask for camera access and run code in your browser. Whether that is safe depends on three things: where the scan data is stored, who can see it in transit, and whether the code is auditable. ScanSheet's answers are below.
Open ScanSheet FreeProduct walkthrough
60-second walkthrough — recording this week.
A short demo of the steps described in this article.
On this page (6 sections)
Where your scan data lives
By default, every row you scan stays in the laptop browser's local storage. ScanSheet's server never sees the barcode value, the quantity, or the note. The only thing the server stores is your account email and a session token, if you choose to sign in.
How the phone-to-laptop connection works
When you click Create session, the laptop generates a one-time token and renders it as a QR code. The phone scans the QR and opens a WebSocket connection directly to the laptop browser, authenticated with that token. The connection does not go through a relay server — the data flows from your phone's browser to your laptop's browser, encrypted with TLS by your hosting provider.
What data ScanSheet's server can see
- If you are signed out: nothing. No account, no email, no scan rows.
- If you are signed in: your email, sign-in timestamps, and subscription status.
- If you are signed in and using Pro cloud backup: your scan rows are uploaded to your own Google Drive, not to ScanSheet.
How to clear your data
Open the More menu in ScanSheet and click Clear all records. This wipes the local storage immediately. There is no recovery from this action — export first if you want a backup.
Open source and audits
ScanSheet's code is auditable. The front-end runs in your browser — you can view source, inspect the network traffic, and verify the WebSocket payload. The server side is documented in the public repository, including how the authentication tokens are generated and how rate limits are applied.
How ScanSheet compares to other storage models
| Approach | Where data lives | Who can see it | Audit trail |
|---|---|---|---|
| ScanSheet (default) | Your browser only | Only you | Browser dev tools |
| ScanSheet + Pro cloud backup | Your Google Drive | Only you + Google | Google Drive activity log |
| Native desktop scanner app | Your machine | Only you | Local logs |
| Cloud-only scanner SaaS | Vendor's database | Vendor + you | Vendor audit log (if provided) |
| Pen + paper | Physically with you | Anyone who sees it | None |
Common use cases
- Evaluating whether to trust a browser-based scanner for sensitive SKUs
- Compliance review for IT or data protection officers
- Choosing between ScanSheet and a desktop-installed scanner
Frequently asked questions
Quick answers to what teams ask before they switch to ScanSheet.
Can ScanSheet employees see my scans?
No. Scan data is not stored on ScanSheet's servers. Only you and anyone you share the exported file with can see the data.
Does the camera permission expire?
The phone browser remembers the camera permission for the lifetime of that tab. If you close the tab and reopen it, you will be asked to allow camera access again.
What happens if I lose my phone?
Your scan data lives in the laptop browser, not on the phone. Losing the phone does not affect your data. The phone session also expires automatically after 60 minutes of inactivity.
Ready to scan your first barcode?
No app to install, no credit card to start. Pair your phone with ScanSheet in 60 seconds.
Open ScanSheet Free