Privacy policy

1. Who this applies to

This policy covers the website at the address you are reading it on, operated by Warrantyfy ("we", "us"). Contact details are on the contact page.

2. The data you enter into the tracker

When you add a product you may enter a name, brand, model, serial numbers, purchase date, warranty length, price, seller, receipt number, tags and notes, and attach documents such as photographs of receipts and invoices.

All of this is stored locally in your browser — product details in your browser's local storage, and attached files in its local database (IndexedDB). It is held on the device you are using, under this site's origin.

This data:

• is not sent to our servers at any point, including if you create an account — an account stores contact details only, never your records;
• is not accessible to us in any form;
• is not shared with advertisers, analytics providers or anyone else;
• is not synchronised between your devices or browsers;
• remains on your device until you delete it, or until your browser's site data is cleared.

Reports are generated in your browser from this local data. Generating or downloading a report does not transmit anything.

What this means for you

Because we hold nothing, we cannot recover your records if they are lost. Clearing your browsing data, using a private window, uninstalling the browser, or switching device will remove or leave behind your records. The backup export in Settings produces a single file containing everything, including attachments. Keeping one somewhere safe is the only protection against loss, and it is entirely in your hands.

Deleting your data

Delete a single product from its detail view, or everything at once from Settings → Erase everything. You can also clear this site's data through your browser's own settings. Deletion is immediate and permanent, and there is no copy anywhere else to request deletion of.

2a. If you create an account

Creating an account is optional. Every part of this site — the tracker, the scanner, the calendar and the free report — works without one, and nothing already saved on your device is withheld from you if you never sign up.

What we store, and nothing further:

• your name, as you typed it;
• your email address;
• your phone number;
• a one-way hash of your password — we cannot read your password, and nobody here can tell you what it is;
• the dates the account was created and last signed in to.

What an account does not contain. It holds none of your products, receipts, prices, serial numbers, photographs, notes or reports. Those stay on your device exactly as described above. An account is not a backup, and signing in on another device will not bring your records across — only your own exported backup file does that.

Why we hold it. To identify you, to contact you about a purchase or an unlock code, and to send a password reset link when you ask for one. We do not send marketing email, and we do not sell, rent or share these details with anyone. They are not passed to advertisers or analytics providers.

Password resets. Asking for a reset link stores a one-hour, single-use ticket against your account and sends the link to your email address. Only a hashed form of the link is kept, so the database by itself cannot be used to reset anyone's password. Using the link, or requesting another, cancels it. We answer a reset request the same way whether or not the address has an account, so the form cannot be used to find out who is registered.

The basis for holding it. Your consent, given by ticking the box on the sign-up form. You can withdraw it at any time by deleting the account.

How long. Until you delete the account. There is no other retention period and no archive copy.

Deleting it. Sign in, open your account and choose Delete my account and details. Your name, email address and phone number are removed from our database immediately and permanently. This does not touch the products saved in your browser, which remain yours. If you would rather we did it, write to support@warrantyfy.com from the address on the account.

Security. The connection is encrypted (HTTPS). Passwords are stored only as a salted one-way hash, strengthened with a secret held outside the database, so a copy of the database alone would not reveal them. Sign-in attempts are rate limited. The session cookie is marked HttpOnly, Secure and SameSite=Lax, so page scripts cannot read it and it is not sent from other sites.

3. The receipt scanner and your camera

The scanner reads a receipt using your device's camera, or a photo you choose from it. Both the photograph and the text read from it stay on your device.

• Camera access is asked for only when you open the scanner, never on page load, and your browser controls that permission. You can decline and use a photo from your gallery instead.
• The photograph is not uploaded. It is held in memory while being read, and saved into your browser's local storage only if you choose to attach it to the product.
• The text recognition runs on your device. It uses a WebAssembly recognition engine that executes inside your browser. The image is never sent to an optical-character-recognition service, ours or anyone else's.
• Nothing read off a receipt is transmitted — not the shop name, the amount, the invoice number or the seller's tax registration number.

One thing does leave your device the first time you scan: the browser downloads the recognition engine and its English language data from a public software distribution network (jsDelivr, at cdn.jsdelivr.net). That is an ordinary request for a software file, like loading a stylesheet, and it carries no receipt data and no information about what you are scanning. As with any web request, the network can see your IP address and that a file was requested. The files are then cached by your browser, so later scans work offline and make no further requests.

If you would rather make no third-party request at all, do not use the scanner — every field it fills can be typed in directly, and the rest of the site never contacts it.

4. Data collected automatically when you visit

Like any website, this site is served by a web host that records standard technical information in its server logs — IP address, browser type and version, the page requested, the referring page, and the date and time. These logs are generated by the hosting infrastructure, are used for security and troubleshooting, and are retained according to the host's own policies. They are not combined with anything from the tracker, which we never receive.

5. Advertising

This site is supported in part by advertising served by third-party ad networks, including Google AdSense where enabled.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• You may opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info/choices or optout.networkadvertising.org.

Third-party ad networks may also use web beacons or similar technologies to measure ad performance. Their collection and use of information is governed by their own privacy policies, not this one. We do not control what they collect and we do not receive it.

Advertising does not have access to your tracker data. Your products, prices and receipt images are held in storage scoped to this site's own origin and are not readable by third-party scripts, nor are they transmitted anywhere.

6. Analytics

Where enabled, we may use a third-party analytics service to understand aggregate usage — which pages are visited, roughly how long people stay, and which guides are read. Any such service is configured to anonymise IP addresses where that option exists. Analytics never receives the contents of your tracker.

7. Cookies and local storage

Technology	Set by	Purpose
Local storage	This site	Your products, settings and preferences. Never transmitted.
IndexedDB	This site	Receipt and document files you attach. Never transmitted.
Advertising cookies	Third-party ad networks	Ad delivery, frequency capping and measurement.
Analytics cookies	Third-party analytics, where enabled	Aggregate usage statistics.

We set no cookies of our own for tracking purposes. You can block or clear cookies through your browser settings; doing so does not affect the tracker, though blocking local storage entirely will stop it saving your records.

8. Payments

If you purchase the optional detailed report, payment is handled by a third-party payment provider. Card details are entered on the provider's own systems and are never seen by, passed through, or stored on this site. We receive confirmation that a payment was made and the email address you supplied in order to send you an unlock code. We do not receive your card details.

9. Children

This site is not directed at children and we do not knowingly collect personal information from them. Since the tracker collects nothing centrally, there is nothing for us to hold or delete on anyone's behalf.

10. Your rights

Data protection laws in many jurisdictions give you rights to access, correct, export and delete personal data held about you. In relation to your tracker records, those rights are exercised directly and immediately through the interface, because you are the only holder:

• Access — everything is visible in the tracker.
• Export — CSV export, or a full backup including attachments.
• Correct — edit any record at any time.
• Delete — delete a product, or erase everything, from Settings.

For anything relating to server logs, payment records or correspondence, contact us at the address on the contact page and we will respond as required by applicable law.

11. Links to other sites

Guides and pages may link to external websites, and the tracker lets you store a product URL of your own choosing. We are not responsible for the content or privacy practices of any external site.

12. Security

The site is served over an encrypted connection. Because your records never leave your device, their security depends on the security of that device and that browser — a shared or unlocked device means your records are visible to anyone using it. If you are using a public or shared computer, use Settings → Erase everything before you leave, or use a private window and accept that nothing will be saved.

13. Changes to this policy

We may update this policy as the site changes. The date at the top reflects the most recent revision. Material changes will be noted on this page.

14. Contact

Questions about this policy can be sent through the contact page.