Privacy Policy

The typed calculator: /check

The /check tool runs entirely in your browser. The numbers you type in (the label quantity, your scale reading, product type) are never sent to our servers and we never see or store them. Refreshing the page or closing the tab clears them.

If you use the “Share” or “Copy link” buttons, the numbers you entered become part of the URL you choose to share. That link is only created and sent when you tap the button. We don’t generate or store it otherwise.

The camera tool: /scan

/scan photographs your scale and your package and reads them with an AI vision call, which is different from /check and does touch our servers. Specifically:

• An anonymous device ID, not an account. The first time you use /scan, your browser generates a random ID and stores it on your device (not tied to your name, email, or any account: we never ask for one). It exists so we can cache your scale’s calibration for 24 hours and enforce a daily limit on how many photos we’ll process, so one device can’t be used to run up a large bill against us.
• Photos are processed, not stored. When you photograph your scale or a label, that image is sent once to our server, forwarded once to Anthropic’s Claude API to read the numbers on it, and then discarded. We do not save the image file anywhere. We only keep the numbers that come back (e.g. “16 oz declared, 13.4 oz actual”) and, for a calibration check, whether your scale passed and by how much.
• What we actually keep, and for how long: your device ID; your most recent scale calibration result (replaced every time you recalibrate, and treated as stale after 24 hours); and a daily count of how many checks you’ve run (for the rate limit: resets every day, never shows you what you checked, just how many).
• Location. /scan does not currently ask for or use your location. If a future version resolves your purchase location to route a complaint to the right state agency, it will use state-level resolution only (never a precise address or coordinates), and this page will be updated before that ships.

The price check

The price check reads each shelf tag photo and your receipt photos the same way the weight check reads a label: each image is sent once to our server, forwarded once to Anthropic’s Claude API to read the prices, and then discarded. We do not save the photos, the receipt, or the prices on our servers. It uses the same anonymous device ID and daily limit as the weight check.

Your trip stays on your phone. While you shop, the list of tags you snapped (small previews, item names, prices, times) and your state are saved only in your phone’s browser, so the trip survives a closed tab. We never receive that list. Tap “Cancel this trip” or “Start a new trip” to clear it.

Usage records. For each check we log the device ID, the kind of check, the time, and how much processing it used, so we can keep the service free and stop abuse. These records contain no photos and no prices.

State guess. To show your state’s overcharge rules, the page starts with a state guessed by our host from your connection (state level only, never a street address or coordinates). We don’t store it, and you can change it on the page.

Service providers

• Anthropic reads photos through its Claude API. Photos are sent for that one reading only.
• Vercel hosts the site. Like any web host it keeps short-lived technical logs, and it provides the state-level location guess.
• Turso stores the anonymous device ID, scale calibration, daily counts, and usage records described above.
• Microsoft Clarity, when switched on, records page use as described under Analytics.

Delete your data

Clearing your device ID from your browser (or using a private/incognito window) is the same as starting over. There’s nothing tied to it we can look up by name or email, because we never collect either. If you want us to remove a specific device’s records from our database directly, email hello@checkoutcop.com and we will delete your calibration record, rate-limit counters, and device entry.

No research or resale, ever, without asking first

We don’t sell personal data. If we ever build a feature to contribute anonymized, aggregated data to research, it will be a separate, explicit, default-off opt-in, never something you’re enrolled in by using the app.

Analytics and cookies

We don’t run third-party ad pixels or sell data. We may use Microsoft Clarity, a free analytics tool, to see which pages people use and where they get stuck. Clarity records clicks and scrolling, masks what you type, and sets its own cookies. It never sees your photos or receipts.

Ads

Reading pages (the home page, the state rights pages, the what-to-do guide, the real cases, and the who’s-responsible page) show ads for other websites we run. The ad box loads a small script and pictures from our own ad server (house-ads.vercel.app). It sets no cookies and does not track you across sites, and we don’t use outside ad networks. There are no ads on the scan and check tools, their results, or store accounts and badge pages. If you click an ad, the site you land on is told which page you came from, through a tag in the link.

Contact

Questions or requests: hello@checkoutcop.com.