Privacy

What receipts.page keeps, who handles it, and how to delete it. Last updated November 11, 2026.

Your receipt photos

• Before upload, your phone shrinks each photo to at most 1800 pixels on its long edge and re-encodes it, which drops its location and camera data. It also makes a small copy for the list.
• Photos are stored privately on Cloudflare under your account. There are no public links; a photo is only sent to the account that uploaded it.
• To read a receipt, its photo is sent to an AI model running on Cloudflare Workers AI. Cloudflare says it doesn't use content sent to Workers AI to train models.
• The photo is kept as you took it. Anything printed on the receipt, such as the last digits of a card, stays in the photo. In the details read from it, card numbers are cut to their last four digits.
• Photos and receipt details stay in your account until you delete them.

What is stored

• Your email address and a hash of your password.
• Each signed-in session, with the IP address and browser it was opened from. A session lasts until 30 days after it was last used, and is deleted within a day of that, or at once when you sign out of it, reset your password or delete the account.
• The receipt photos you add, a small copy of each for the list, what was read from them, and what you typed.
• Daily counts of uploads, reads and emails, and short-lived counts of requests per IP address and per account, to keep usage within limits and slow down abuse.

Who handles it

• Cloudflare hosts the app and stores everything above.
• Cloudflare Workers AI reads receipt photos.
• Confirmation and password-reset emails are sent with Cloudflare Email Sending.
• The sign-in and sign-up forms run Cloudflare Turnstile, a check that you're not a bot.
• Cloudflare keeps operational logs of requests to the app for debugging. Photos and what is read from them are never written to those logs.

What isn't

No advertising and no analytics tools. Signing in uses a session cookie; Turnstile is Cloudflare's own check and runs only on the account forms. Nothing is sold or shared for marketing.

Deleting everything

Deleting a receipt deletes its photo. Account, then Delete account, removes your photos, your receipts and the account itself; wait until it says it's done. Export a CSV first if you need the records (it doesn't include photos). Copies your own browser has cached may stay on your device until it clears them.

Contact

Questions or a request about your data: hello@receipts.page.