The photo is stripped before it leaves
GPS, camera serial and timestamps come off in your browser, before anything uploads. If the scrubber cannot verify a file is clean, it refuses to send it.
Photograph it, and it becomes a jar you can turn, open and show.
Point your camera at the jar. The colour comes straight off the pixels, read in your browser. No studio, no lightbox, no fiddling with swatches.
Turn it. Unscrew it. Look inside. The cap is a real screw and cannot lift without turning, and what is in there is your colour, not a stock render.
Ice water, dry sift, cold cure, rosin, temple balls. All of it on one shelf you can walk around, for the first time.
People open your shelf and turn the jars themselves. That lands differently to a photo dropped in a group chat.
01 / Getting a jar in
Three steps, one screen. Then it is on the shelf and you never touch it again.
A ring shows you where to put the jar mouth. That is not decoration: holding everyone to the same framing is what makes two people's colours comparable instead of two people's lighting.
Pixels inside the ring get sorted by lightness and the midtone is taken. Specular highlights are thrown away, because a highlight is the colour of your kitchen light, not of your hash.
Strain, washer, micron, wash, cure, melt. Type what you know and skip what you do not. Nothing here is required to get a jar.
How it got here changes what it says
The camera stream, in an open session, with no stored file in between. The strongest claim available, and the one worth having.
A photo exists and it might be anyone's. Perfectly fine for logging what you have. It just does not claim more than it can.
Typed from memory. Still a jar, still yours, still on the shelf. An assertion, and it says so.
Every tier is open to every account, free included. Shooting a jar in your hand outranks a paying member's screenshot, and it always will. That only means something if it cannot be bought.
02 / What premium adds
Payment buys capability. It never buys standing.
What you actually have, right now. This is the shelf people mean when they ask what you are on.
Free accounts log unlimited jars and every one of them can hold the strongest provenance badge there is.
Renders normally. Carries whatever badge it earned.
Jars you do not have. The one you keep hearing about, the drop you missed, the strain you want somebody to wash for you.
It is a want list you can send. Instead of describing what you are chasing, you hand over a shelf and let people look at it. Useful the next time a friend asks what to pick up, and useful pointed at a seller.
Glows from the inside, so nobody can mistake it for something you own. No provenance badge, because there is nothing to attest yet.
Packaging that does not exist yet. For designers mocking up a label and brands reviewing one before it goes to print.
Quarantined at the database level, not in the interface: excluded from public browse and from every count, so an unreleased jar cannot surface on a stranger's shelf.
Wears an orange band on the jar itself, which survives a screenshot. No badge, because nobody ever owned it.
| Free | Premium | |
|---|---|---|
| Provenance badges | Full | Full |
| Current rotation shelf | Yes | Yes |
| Jars logged | Unlimited | Unlimited |
| Jars on the 3D shelf | Your rotation | Rotation and archive |
| Wish list bay | No | Yes |
| Prototype bay | No | Yes |
| Jar Studio | No | Yes |
| Shelf trim and lighting | No | Yes |
| Colour tuning | As captured | Yes, disclosed on the jar |
| Render export | Small | Full resolution, licensed |
| Export your data | Yes | Yes |
Colour tuning is the one that needs saying out loud. A sensor is not an eye, so premium can nudge the hue toward what you actually saw. The jar then says it was adjusted, and by how much. The original reading is kept and shown next to it.
03 / And none of it leaks
Show the jars. Not the receipts, the vendor, or where you were standing.
GPS, camera serial and timestamps come off in your browser, before anything uploads. If the scrubber cannot verify a file is clean, it refuses to send it.
Your passphrase unwraps a key that stays on your device. Notes, prices and vendors are sealed before they reach us. Lose the passphrase and the data is gone, including for us.
Publishing sends a projection with a fixed column list. Prices, vendors, batch codes and dates cannot leak, because they were never in what left.
Export everything whenever you want. Delete it and it is deleted. No export fee, no thirty day window, no talking to anyone first.
One email when it opens. Nothing else, ever.