Privacy.

We may collect the following categories of information:

We may use information to:

We use automated tools, artificial intelligence, and third-party providers (including OpenAI) to read and understand receipt images and text, identify products, look up current prices, and research retailer price-adjustment policies.

Automated results may be incomplete or inaccurate. You should verify important information directly with the relevant retailer before relying on it.

On the public WeaselDen site, our own consent banner asks before cookies, a browser identifier, interaction events, or session replay are used, and remembers your choice in your browser. These are off by default and start only when you allow analytics.

Anonymous visit counting. If your browser’s time zone is outside Europe, the site counts page views anonymously with PostHog’s cookieless mode before you choose and after you decline. Nothing is stored on your device for this: no cookie, no local storage, and no browser identifier, and session replay does not run. Each page view sends the page path without query strings, the referring site’s hostname, sanitized campaign tags, and basic browser and device information. PostHog may also use the IP address transiently to derive approximate geography, such as country, region, or city. To tell one day’s visits apart without a cookie, PostHog computes a one-way hash on its servers from the IP address, the browser’s user agent, the site’s hostname, and a salt that changes every day. The salt is discarded, so the hash cannot be traced back to you or linked across days, and the raw IP address is not stored.

If your browser’s time zone is in Europe, including Iceland, Cyprus, the Canary Islands, Madeira, the Azores, Ceuta and Melilla, and the EU’s overseas regions in the Caribbean, South America, and the Indian Ocean, nothing is counted until you allow analytics. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is counted at all, anonymously or otherwise.

After you allow analytics, PostHog may receive approved interaction events and a pseudonymous browser identifier. When campaign measurement is enabled and you also allow analytics in your Den account, a bounded campaign context and that identifier can be associated with a pseudonymous account identifier to measure signup, product use, trial and subscription outcomes. Names, email addresses, authentication tokens and product contents are excluded. The public site does not create PostHog person profiles; the consenting account application may create a pseudonymous analytics profile for those outcomes. PostHog processes the visitor IP address transiently for approximate geography and bot filtering, then discards the raw IP address before storing the event.

Campaign context contains only sanitized campaign tags, an approved public landing-page path and at most the referring hostname. It is held in this browser tab for up to 30 minutes after consent. A Den sign-in handoff can include the pseudonymous browser identifier described above. A Weasel Estates handoff contains only campaign context, without your Den browser or account identifier. Each product asks for its own analytics permission before associating campaigns with account outcomes. Declining or withdrawing permission prevents further campaign handoffs; cookieless visits are not joined to accounts.

We do not intentionally send names, email addresses, form contents, full query strings, account content, uploaded files, payment details, authentication data, or private communications to PostHog. Masked session replay may run only on approved public pages. Page text and inputs are masked; sensitive elements, network headers, network bodies, console logs, cross-origin frames, canvas, audio, and video are excluded. Replay is disabled on application forms, portal, legal, authentication, account, and payment routes.

If you decline or later withdraw analytics consent, cookies, the browser identifier, interaction events, and session replay stop. Outside Europe, anonymous page counting continues as described above. The site works the same either way.

We do not sell your personal information. We may share information with:

We rely on a small set of providers, who may process information only as needed to provide services to us:

We keep information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, prevent fraud, and support legitimate business purposes.

Receipt and purchase information remains in your account while your account is active or until you delete it. If you request deletion of your account or data, we will take reasonable steps to delete or de-identify it, unless we need to retain it for legal, security, accounting, or dispute-resolution purposes. Deleted information may remain in backups for a limited period until those backups are replaced.

Your consent choice is stored in your browser for up to 12 months, after which the banner asks again. Under our current PostHog plan, analytics events, including anonymous page views, and masked session replay are retained for no longer than 12 months unless we delete them sooner. Anonymous page views carry no identifier that lasts beyond one day. The pseudonymous browser identifier used after consent may persist for up to 180 days and is reset when analytics consent is withdrawn.

Withdrawing Analytics consent stops future collection but does not automatically delete records collected while consent was active. You may contact us to request access to or deletion of information associated with you, subject to applicable law and our ability to identify the relevant record.

Depending on where you live, you may have rights to access, correct, delete, export, or limit certain uses of your personal information.

You can stop tracking items and delete receipts at any time, and you can request help with your account or data by contacting hello@weaselden.ai. You may unsubscribe from marketing emails using the link in the message; we may still send service-related messages such as account, billing, or security notices.

You can allow or decline optional analytics, and change your choice at any time, through Cookie Settings in the site footer or on our Cookie Policy page. Declining does not limit access to the public site. Outside Europe, declining stops cookies, the browser identifier, interaction events, and session replay, while anonymous page counting continues. If your browser sends a Do Not Track or Global Privacy Control signal, the site counts nothing at all, and PostHog honors those signals too.

We use reasonable administrative, technical, and organizational measures designed to protect information. Sign-in tokens are validated and are never written to our usage logs. No system is completely secure, however, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials safe and for contacting us if you believe your account has been accessed without permission.

The Service is intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that a minor has provided personal information, we will take reasonable steps to delete it.

The Service may contain links to third-party websites, retailers, or services. We are not responsible for their privacy practices or content. Please review their policies before providing information to them.

The Service is operated from the United States. Our current PostHog analytics configuration uses its United States hosting region. If you access the Service from outside the United States, information may be processed in the United States or other locations where our service providers operate. We may update our hosting regions and safeguards as the Service expands.

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, through the Service, or by posting an updated version here. Your continued use of the Service after changes take effect means you accept the updated policy.