Security

Built to know as little as possible

A receipt service handles purchases. We designed Receiptter so it never needs to know who bought them.

What we store

Receipt contents your POS sends (items, VAT, total, payment type such as “Card”, fiscal reference), the till it came from, and when it was collected. Merchant account details. Anonymous tap and click counts.

What we never store

Card numbers, CVV or payment authorisations: long digit sequences are masked on arrival. Shopper names, phone numbers or accounts. Precise location. Advertising identifiers.

Private receipt links

Each collected receipt gets its own unguessable link (192 bits). We store only a hash of it. A tag's public link alone can never reveal a receipt that someone else collected.

Signed taps

Secure tags (NTAG 424 DNA) add a cryptographic signature and a counter to every tap. We check both and refuse anything replayed, so a link copied from the counter is useless.

Separated merchants

Every query is scoped to the signed-in merchant. API keys and session tokens are stored as hashes; keys are shown once and can be revoked instantly. Automated tests try cross-merchant access on every build.

Hosted in the EU

The database is placed in Western Europe on Cloudflare. Traffic is encrypted with TLS. See the full list of subprocessors.

GDPR

For receipt data, the shop is the controller and Receiptter is its processor. We sign a data processing agreement with every business customer.

Retention	Uncollected receipts expire after the claim window. Collected receipts are kept while the merchant's account is active, then deleted within 30 days of cancellation.
Newsletter	Only with an explicit checkbox. We store the exact consent text and time.
Cookies	Strictly necessary only: a sign-in session and a device ID so the same phone can reopen its receipt. No tracking cookies, no banner needed.
Your rights	Access, correction, deletion, export. Write to us at privacy@receiptter.eu.

Found a vulnerability?

Write to us at security@receiptter.eu with steps to reproduce. We reply within two working days and won't take legal action against good-faith research.