Privacy

The short version

• We store the purchases you type in, the reminder settings you choose, and your email address.
• We do not read your inbox, connect to your bank, or share your data with the stores you track.
• You can export everything as CSV or JSON, or delete your account and its files, from Settings at any time.

What we store

We keep only what the product needs to work. If you never enter a field, it is empty rather than guessed.

• Account: your email address, a bcrypt hash of your password (never the password itself), whether your email is verified, your time zone, and your reminder preferences: which day offsets to use, the local hour reminders go out, and whether email reminders are on.
• Purchases: item name, store name, order number, purchase date, return deadline, status, amount and currency, item URL, and notes you write.
• Returns and refunds: the return start and handover dates, carrier, tracking number, expected and actual refund amounts and dates, and any notes you add.
• Files you upload: a receipt or return-proof image or PDF, plus its original filename, content type, and size.
• Activity: a history of status changes you made, and a log of reminder messages: when one was scheduled, when it was sent, and whether it failed.

What we do not collect

• No inbox access, email forwarding, or automatic receipt scanning.
• No bank, card, or payment-provider connection.
• No analytics, advertising, or cross-site tracking scripts.
• No location data, contacts, or device identifiers.
• We ask for no information about the contents of a package beyond what you choose to type.

Cookies and sessions

This app sets one cookie: a session cookie that keeps you signed in. It is httpOnly, SameSite=Lax, and does not contain your email or any purchase data — only an opaque token. The database stores a hash of that token, not the token itself, so a database leak does not hand out live sessions. We set no advertising or analytics cookies.

Uploaded files

Receipts and proof photos are stored privately. They are never served from a public URL: the browser fetches them through an authenticated route that checks the file belongs to your signed-in account before reading it. Content type is checked from the file's actual bytes, not just its extension.

Emails we send

Transactional messages only: email verification, password reset, and the return and refund reminders you configure. There is no marketing list and no newsletter. To keep purchase details out of inbox previews, reminder emails identify the item in the body rather than putting it in the subject line.

Who can see your data

Your rows are scoped to your account on every read and write, using the user id taken from your session cookie rather than anything the browser can send. No other account can list, edit, export, or download your purchases or files.

We do not sell data and do not share it with the stores you track. The only third parties involved are infrastructure providers that host the app, the database, the file storage, and the email delivery — and they process the data solely to run those services for us. If the deployment enables error monitoring, that monitoring may receive technical error context, but not your purchase list.

How long we keep it

We keep your data until you delete it. Deleting your account removes your profile, purchases, returns, uploaded files, events, and reminder history. Attachments are purged from file storage as part of that deletion, not left behind as orphans.

Backups are the honest caveat: a deleted row can remain in a provider's backup rotation for a limited period before it ages out. We cannot promise that a backup taken before your deletion is rewritten, but it is not used to serve your data back to you and is not deliberately retained beyond that rotation.

Your choices

From Settings you can change your time zone and reminder schedule, turn email reminders off, export your purchases as CSV or JSON, and delete your account. If you are in a region with specific data rights, contact us and we will help you exercise them.

Security

Passwords are hashed with bcrypt. Sessions use random tokens stored only as hashes and expire. Verification and reset links are single-use and time-limited. Inputs are validated on the server, uploads are size- and type-limited, and sign-in, sign-up, and upload endpoints are rate-limited. No system is perfectly secure, so use a unique password and tell us promptly if you suspect a problem.

Children

This app is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this page

If what we store or how we use it changes materially, we will update this page and change the date at the top. Continuing to use the app after a change means you accept the updated description.

Contact

MXSXLAB Inc., which operates Return Tracker, handles privacy questions and requests to access or delete your data. Email contact@mxsxlab.com, or use the contact page. See also the terms and the help page.