Privacy

Pull Up Receipts has no server, no account system, and no database. Your chat.db is read inside your browser and never leaves your device.

What we collect

Nothing. No cookies, no analytics, no local storage, no fingerprinting. We have no way to know who you are, who you text, or what your label said. Refreshing the page clears everything you loaded.

Why this isn't an upload

Dragging your file onto the page looks exactly like uploading it, but it isn't. Your browser hands the bytes to code running on your own machine — a local file read, not a transfer. No network request carries your messages anywhere.

How your messages are handled

Your file is read into memory in a Web Worker using sql.js, a build of SQLite compiled to WebAssembly. The statistics are computed there, the label is painted onto a <canvas>, and your browser turns that into the PNG you download. A Content Security Policy limits the page to same-origin network access, and there is no backend on that origin to receive anything.

Loading this page fetches its own code, styles, and fonts from this site, the way any web page does. After you choose a file, the app fetches the last pieces it needs — a worker script and sql-wasm-browser.wasm, the SQLite engine that reads your database. Every one of these is a download from this site to you. None of them carries anything outward, and there is no backend here to receive it if one tried.

What our host sees

This site is served by Netlify, which keeps standard access logs — IP address, browser user agent, and timestamp — for every page it serves. That is ordinary web hosting rather than tracking: it happens on essentially every site you visit, it contains nothing about your messages, and its retention is governed by Netlify rather than by us. We do not read those logs and have built nothing on top of them.

The other person in your chat

A label summarizes someone else's messages alongside your own. Because everything is computed on your device and nothing reaches us, we are neither a controller nor a processor of that data — it is your own copy of your own conversation. Whether to share the image is your decision, and it is worth a moment's thought before you post it.

Selling and sharing

We have no personal information to sell or share, and we do not sell or share any.

Children

Pull Up Receipts is not directed to children under 13.

Changes

If this notice changes, the date above changes with it. Anything material will be called out here rather than quietly edited in.

Contact

Questions or complaints: liminalcoasts@gmail.com.