Privacy Policy

We may collect the following categories of information.

Account Information

This may include your name, email address, username, password credentials, account preferences, and related login information.

Receipt and Purchase Information

This may include receipts, receipt images, screenshots, product names, store names, merchant names, purchase dates, purchase prices, order details, wishlist items, refund windows, and other information you choose to upload or enter.

Subscription and Payment Information

If you purchase a paid plan or subscription, payment information may be processed by a third-party payment provider such as Stripe. Receipt Weasel does not store full credit card numbers.

We may receive and store basic payment-related information, such as subscription status, billing plan, payment confirmation, transaction history, and related account details.

Communications

If you contact us, we may collect your name, email address, message content, and any other information you choose to provide.

Usage and Device Information

Unless you decline analytics (in Europe, only if you allow it), we collect limited information about how Receipt Weasel is used, including normalized pages viewed, selected funnel actions, public link and preview-control clicks, scroll milestones, public-page error counts, the Receipt Weasel host used, browser and device type, operating system, referral source, and approximate location. PostHog may use an IP address transiently for approximate location enrichment, but the project is configured to discard the raw client IP rather than store it with events.

Advertising Click References

If you follow an ad to Receipt Weasel, the link can carry a click reference from the ad platform. Unless you turn off advertising measurement (in Europe, only if you allow it), we keep the click reference of a ChatGPT, Google, Meta (Facebook and Instagram) or Microsoft Advertising (Bing) ad with your account, as described in Section 6.

Cookies and Similar Technologies

Our consent notice manages your choices. While Analytics is on, PostHog uses pseudonymous browser storage to count page views and a small set of product funnel events. If your browser's time zone is outside Europe, Analytics is on until you decline it; in Europe it is off until you allow it. After you decline, we only count visits and Start free taps anonymously, without cookies, as described in Section 7. We do not use analytics session replay in Receipt Weasel.

We may use information to:

• Provide, operate, and maintain Receipt Weasel.
• Track receipts, purchases, products, prices, and wishlist items.
• Identify possible price drops, refund opportunities, or retailer policy windows.
• Send alerts, reminders, account notices, and service-related messages.
• Process subscriptions and manage billing.
• Respond to questions, support requests, and feedback.
• Improve, personalize, and develop the Service.
• Unless you opt out (in Europe, only with your permission), tell the ad platform that sent you when you start a free trial or make your first payment, so we can see which ads work.
• Monitor performance, reliability, and security.
• Detect fraud, abuse, unauthorized access, or misuse.
• Comply with legal obligations.
• Enforce our Terms and protect our rights.

Receipt Weasel may use automated tools, artificial intelligence, search tools, third-party providers, or similar technologies to process receipt information, product details, price data, retailer policies, and user requests.

Automated results may be incomplete or inaccurate. You should verify important information directly with the applicable retailer before relying on it.

We do not sell personal information. We share limited ad-measurement events with the ad platform that sent you, unless you opt out (in Europe, only with your permission). You can turn this off at any time, and a Global Privacy Control signal turns it off.

We may share information with:

• Service providers that help us operate Receipt Weasel.
• Payment processors.
• Hosting, database, analytics, security, email, SMS, and customer support providers.
• OpenAI, as the ad platform behind ChatGPT ads, and Google, Meta and Microsoft, as the platforms behind their own ads, for the limited ad-measurement events described in Section 6, unless you opt out.
• Vendors that help process receipts, product data, price data, retailer information, or automated features.
• Professional advisors, such as lawyers, accountants, or consultants.
• Legal, regulatory, or government authorities when required.
• A buyer, investor, successor, or related party if Receipt Weasel is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

Service providers are expected to use information only as needed to provide services to Receipt Weasel.

Unless you decline (in Europe, only with your consent), Receipt Weasel uses PostHog to understand aggregate traffic and whether key steps such as sign-in, viewing Den pricing, starting or completing checkout, and managing your membership are working. Our consent notice records and applies your analytics choice in this browser.

We do not send PostHog receipt contents, product or merchant details, account names, email addresses, Microsoft account identifiers, payment details, Stripe session identifiers, form contents, or raw dynamic receipt URLs. Public error counts include only the error category, never messages, stack traces, resource URLs, or page contents. Session replay is disabled everywhere in the application.

While analytics is on, we also use a random analytics identifier to connect your campaign visit with account creation, receipt processing, tracking, price-drop notifications, and trial or subscription milestones. We retain permitted campaign labels, the public landing path, and the referring hostname, never full referring URLs. Analytics never receives advertising click references: they are removed from the address bar when the page loads, and only the separate advertising measurement choice in Section 6 lets us use one. A temporary signed cookie carries this context through sign-in for up to 30 minutes. The consent notice names this purpose, and declining analytics turns it off.

Withdrawing Analytics in Your privacy choices or Cookie Settings stops future browser collection and requests that future account milestone delivery stop. If that request cannot connect, it is retried on your next visit. Events already delivered are not automatically erased by withdrawal.

If your browser's time zone is outside Europe, full analytics and advertising measurement are on until you decline them; in Europe they are off until you allow them. You may keep or decline both in the consent notice, set each one under Manage preferences, and change or withdraw your choices at any time using Your privacy choices or Cookie Settings below. Each choice is saved in this browser with its date: a choice to keep them for up to 180 days, a choice to decline them for 13 months. Global Privacy Control and Do Not Track signals override an analytics or advertising measurement grant in this implementation and also turn off the anonymous counting below.

Anonymous Counting Without Cookies

If your browser's time zone is outside Europe, we count page visits and taps on our Start free buttons anonymously after you decline analytics. Declining does not stop this anonymous counting. Nothing is stored on your device for it: no cookie, no local storage and no identifier. Each count sends the page, the button, the campaign labels in the link you followed, the name of the site that sent you, and basic browser information such as the browser's time zone. Location lookup is turned off for these counts.

To tell one day's visits apart without a cookie, PostHog computes a one-way hash on its servers from your IP address, your browser's user agent, our site's name and a salt that changes every day. The salt is discarded, so the hash cannot be traced back to you or linked across days, and PostHog does not keep the IP address or user agent from these counts. Anonymous counts are never joined to an account and never shared with advertisers. In Europe nothing is counted until you allow analytics. Analytics requests pass through our own domain on their way to PostHog; that step drops cookies and sign-in headers and keeps nothing.

Essential account, security, and payment functionality may use storage that is necessary to provide the service. Blocking necessary storage in your browser may prevent those features from working.

We keep information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and support legitimate business purposes.

Receipt and purchase information may remain in your account while your account is active or until you delete it, subject to technical and legal limitations.

If you request deletion of your account or data, we will take reasonable steps to delete or de-identify information, unless we need to retain it for legal, security, accounting, dispute resolution, or other legitimate purposes.

An advertising click reference is deleted 90 days after the ad click, when you withdraw advertising measurement, or when your permission expires, whichever comes first. We keep the record of your choice, and of each advertising measurement event (its type, time and delivery status, without the click reference), with your account.

Deleted information may remain in backups for a limited period until those backups are replaced or deleted.

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no system is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials safe and contacting us if you believe your account has been accessed without permission.

Receipt Weasel is intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

If we learn that a minor has created an account or provided personal information, we will take reasonable steps to delete it.

Receipt Weasel may contain links to third-party websites, retailers, payment platforms, or services. We are not responsible for their privacy practices, content, policies, or decisions.

You should review third-party policies before providing information to them.

Receipt Weasel is operated from the United States. If you access the Service from outside the United States, your information may be processed in the United States or other locations where our service providers operate.

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, through the Service, or by posting an updated version.

Your continued use of Receipt Weasel after changes become effective means you accept the updated Privacy Policy.

Questions or requests about this Privacy Policy can be sent to:

Weasel LLC, operator of Receipt Weasel
Email: admin@receiptweasel.com