Privacy policy

There are no accounts, no logins and no tracking cookies. We collect as little as we can get away with, and the thing you type is deliberately public.

Your name, message, receipt number, amount and the hostname of your link (if you added one) are published on the receipt. Do not put anything private in them. They are permanent, and other people will copy, screenshot and archive them.

• ·The content you submitted, the amount, and the Stripe identifiers for your payment.
• ·A one-way hash of your IP address, used for rate limiting and to stop report spam. We do not store raw IP addresses, and the hash cannot be reversed into one.
• ·Reports you file, with the same hashed identifier.

Payments are processed by Stripe. Stripe collects your email address to send you its own payment receipt, and handles your card details entirely. We never receive or store your card number, and we do not keep your email address. Stripe’s handling of your data is covered by Stripe’s privacy policy.

We use privacy-friendly, aggregate analytics to count page views and a few product events — how many people opened the form, started a checkout, completed one, or clicked share. No cookies, no cross-site tracking, no advertising profiles, no selling of data.

Clicks on user-submitted links go through our redirect handler so that dangerous destinations can be switched off centrally. The redirect strips the referrer and we do not record who clicked what.

Published receipt lines are permanent by design — that is the product. Payment records are kept as long as required for accounting and fraud purposes. Rate-limit records are deleted within a day.

Depending on where you live you may have rights to access, correct or delete personal data we hold about you. Because there are no accounts, the practical scope of that here is small: the payment record and the hashed identifier. Receipt numbers themselves are not removed, but content can be voided. Contact us to make a request.

[contact address]