Privacy Policy

This policy covers two things: this website, including the free online receipt generator, and the Receipt Maker app for iPhone and iPad (the "App"). The App is also listed as "Rent Receipt Maker: Cash PDF" on some App Store storefronts.

Who is responsible

Operator and data controller: Ellis Claire, 942 Brilliance Ln, Costa Mesa, CA 92626, United States.

Contact: see the contact page. The full operator details are in the imprint.

In short

• There is no account, no login and no payment on this website.
• What you type into the online receipt form stays in your browser. It is never sent to us or to any server.
• This website uses Google Analytics 4 for visitor statistics. Visitors in the EEA, the UK and Switzerland get no statistics cookies unless they agree, and statistics never include form content.
• In the App, your receipts, payers and business details are stored on your device. We do not run a server that receives them.

This website

The online receipt generator

The receipt form works entirely in your browser. The PDF is created on your device, and the information you enter is not uploaded, logged or shared.

To protect unfinished work, the generator may keep your latest entries in your browser's local storage on your device, separately for each language and page. Nobody else can read it. You can remove it with the form's "Clear" button or by clearing this site's data in your browser settings.

Hosting

The website is a set of static files hosted on Cloudflare Pages by Cloudflare, Inc. To deliver and protect the site, Cloudflare processes technical request data such as your IP address, browser type, the address you requested and the time of the request. See Cloudflare's privacy policy.

Visitor statistics (Google Analytics 4)

To see which pages are useful, this website uses Google Analytics 4 (GA4). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may also process the data.

What is measured. Page views and a few events: a click on an App Store or Google Play button, a language switch, starting to fill in the receipt form, a finished or failed PDF download, and showing or closing the app suggestion card. Each event carries only technical labels such as the page language, the kind of page, the paper size or the currency — never names, amounts, addresses or anything else you type into a form. GA4 also records general technical information such as the device type, browser, screen size, the page that sent you here and an approximate region (country or city). According to Google, GA4 does not log or store IP addresses.

Cookies. Where statistics are allowed, GA4 stores two cookies in your browser: _ga, which tells visits from the same browser apart, and _ga_<ID>, which keeps track of the current visit. Both are kept for up to 2 years and renewed on each visit. We do not use the data for advertising: the advertising signals of Google's consent mode are switched off for every visitor.

Visitors in the EEA, the UK and Switzerland. For visitors in the European Economic Area (the EU plus Iceland, Liechtenstein and Norway), the United Kingdom and Switzerland, statistics are refused by default. Google Analytics then sets and reads no cookies. The Google script is still loaded and can send Google a signal without a cookie identifier, for example that a page was opened and which consent setting applies; Google may use such signals to estimate total visitor numbers. If a cookie banner is shown to you and you choose "Accept", the cookies above are set from then on; without that choice they are not. Legal basis: your consent (Art. 6(1)(a) GDPR).

Visitors elsewhere. Everywhere else, statistics are on by default, because we have a legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR where it applies). You can object at any time, as explained below.

Where the statistics are stored, and for how long. The statistics are stored on Google's servers. Google may transfer them to the USA; Google LLC is certified under the EU–US Data Privacy Framework and also relies on the EU standard contractual clauses. Event data linked to the cookies is deleted after 14 months at the latest; reports without identifiers may be kept longer.

How to say no or change your mind. Delete this site's cookies in your browser settings and block cookies for it, or install Google's browser add-on to opt out of Google Analytics. If this website shows you a cookie banner, you can also change your choice at any time under "Cookie settings" at the bottom of every page. More in Google's privacy policy and in how Google uses information from sites that use its services.

Additional statistics: Plausible and Microsoft Clarity

Plausible counts page views and selected interactions on our own statistics server. It uses no cookies or persistent visitor identifiers and never receives receipt form contents.

Microsoft Clarity provides heatmaps and session recordings only after you accept. All text is masked, including receipt entries and previews. Advertising storage consent stays denied. You can withdraw consent under “Cookie settings”; the page reloads to stop Clarity. Clarity is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Microsoft processes interaction and technical data and may transfer it to the USA. Its retention and international transfer terms are described in the Microsoft privacy statement below.

Plausible uses no cookies. Microsoft Clarity loads only after you choose “Accept”, in every country. It may set _clck (up to 1 year) and _clsk (up to 1 day) to connect visits and page views. You can withdraw consent under “Cookie settings” in the footer. This deletes the first-party Clarity cookies and reloads the page to stop recording. Your receipt draft remains in your browser.

The list below shows which statistics or third-party services this build of the website actually loads.

Links to the App Store and Google Play

Store buttons contain a campaign label made of the page language and the page name, for example "en-home". It tells us which page led to a download in Apple's or Google's reports. It contains no personal information. Once you follow a store link, Apple's or Google's privacy terms apply.

Email

If you email us, we use your address and message only to answer you. Retention: until your request is resolved, then for at most 2 years; after that we delete it.

The Receipt Maker app

Information stored on your device

The App may store the following information that you choose to enter or import:

• issuer or business details, such as name, address, tax identifiers, email, phone number, website, bank details, payment link, logo, stamp and signature;
• payer or contact details, such as name, company, address, email address, phone number and notes;
• receipt details, such as amounts, currency, dates, payment method, purpose, line items, tax information, receipt numbers, property or rent details and notes;
• generated PDFs, local preferences, counters and backup metadata.

This content stays in the App's local storage. It leaves the App only when you choose an action such as sharing a PDF, exporting a backup, saving a file to cloud storage or sending a file through another app. The privacy practices of the destination you choose then apply.

Device permissions

• Contacts: to let you pick or import a payer. The App reads only the fields needed for this: name, organization, postal address, email address and phone number. Imported information is copied into the App's local database.
• Camera and photo library: to take or select a logo or a similar image for your receipts.

The App does not request App Tracking Transparency permission. You can change permissions at any time in your device settings; some features may then stop working.

Purchases and subscriptions

Purchases are processed by Apple. We never receive your full payment-card details.

The App uses RevenueCat to validate purchases, check subscription status, restore purchases, prevent fraud and provide purchase statistics. RevenueCat may process an automatically generated anonymous App User ID, receipt or purchase tokens, product and transaction information, purchase history, subscription and entitlement status, locale, currency and related technical request information. The App does not send your receipt content, contacts, logo, signature or business profile to RevenueCat. See RevenueCat's privacy policy.

Usage statistics and crash reports

To understand how the App is used and to fix errors, the App uses Google Analytics for Firebase and Firebase Crashlytics, provided by Google. When switched on, these services collect:

• usage events, such as completing setup, creating, sharing or printing a receipt, opening the upgrade screen and the result of a purchase attempt, together with categorical details like the receipt type, template, document language, paper size and currency;
• an automatically generated app instance identifier, device model, operating-system version, app version, language and a general region derived from a masked IP address;
• crash reports, including stack traces and the technical state of the App at the time of the crash.

These services never receive your receipt contents, payer or contact details, amounts, receipt numbers, business profile, logo or signature. The App does not collect the advertising identifier (IDFA), does not use this data for advertising or cross-app tracking, and does not link it to your identity.

You can turn this off at any time in the App under Settings › About › Share usage statistics. Usage statistics and crash reports then stop. Google's privacy information: policies.google.com/privacy and firebase.google.com/support/privacy.

Advertising

The current App version shows no ads. It does not start an advertising service, request the advertising identifier or send information to Google for advertising. If this ever changes, this policy and the App Store privacy details will be updated first, and any consent required by law will be requested in the App.

How information is shared

We do not sell your information. It is shared only:

• with Apple, RevenueCat and their service providers, as needed to process purchases and keep paid access working;
• with Google (Firebase) for usage statistics and crash reports, as described above, unless you turn this off in Settings;
• with an app or destination you deliberately choose when you export, back up, print or share content;
• when required by law or legal process, or to protect users, the public or our legal rights.

Keeping and deleting data

Receipts, payers, your profile, images, signatures, PDFs and preferences stay on your device until you delete them, use Settings › Delete all data, or uninstall the App. Files and backups you exported elsewhere must be deleted there.

Purchase records are kept by Apple and RevenueCat under their own legal obligations and retention rules. For help with a RevenueCat customer record, contact us; we may need your anonymous App User ID or transaction details to find it. The App has no account, so there is no separate account to delete.

Security

The App relies on the security features of your device and on encrypted connections to its service providers. No storage or transmission method is completely secure. Please protect your device and any PDFs or backups you export, because receipts can contain financial and personal information.

Children

The App and this website are general-purpose tools and are not directed at children. We do not knowingly ask children for personal information.

Processing outside your country

Apple, RevenueCat, Google, Cloudflare and their service providers may process information in countries other than the one where you live. Their legal safeguards and privacy notices apply to that processing.

Your rights

Depending on where you live, you may have the right to access, correct or delete information, to restrict or object to processing, and to withdraw consent. Most receipt and contact content is under your direct control on your device and can be edited or deleted there. For any other request, contact us. You may also complain to your local data-protection authority.

Changes to this policy

We update this policy when the website, the App, our service providers or the law change, and we change the date at the top of this page.