Privacy

cheki.et has no accounts and no database. This page says what happens to what you send it, and it follows the code in the public repository, so you can check every line.

When you check a receipt

  • What you send (a receipt link, a reference, account digits or a phone number when the bank needs them) goes to cheki's server, which uses it to fetch that receipt from the bank and returns what the bank says. It is not written to a database or a file.
  • A receipt the bank confirmed is kept in the server's memory for up to 6 hours, so checking it again does not ask the bank again. It includes what the bank returned (names, amount, date). Failed checks are never kept, and the memory is cleared whenever the server restarts.
  • A screenshot you upload is shrunk on your device first (which drops its location data) and sent to cheki only to look for a QR code. It is read in memory and discarded. If there is no QR code, the text is read in your browser and the image does not leave your device again.
  • Receipt text you paste, or a receipt page sent by the bookmarklet, is read and returned the same way. It is never marked verified, because the bank did not confirm it.

What stays on your device

  • Recent checks: the last 8 receipts a bank confirmed on this device (bank, reference, amount and time, no names), kept in your browser's local storage. Clearing site data removes them.
  • Your theme and language choice, in the same local storage. cheki sets no cookies.

Analytics

cheki.et counts page views with Vercel Web Analytics, which uses no cookies and keeps no personal identifier (Vercel's description). Before a view is sent, cheki removes the query string and the # part of the address, never counts API calls, and drops any address that is not one of its own pages. So no receipt reference, receipt link or account number reaches analytics.

Rate limits and your IP address

The hosted API limits requests per IP address: 30 checks a minute, 5 batch requests a minute, 20 pasted receipts and 20 screenshots a minute, and 5 contributions every 10 minutes. To count them, the server holds your IP address and the times of your recent requests in memory for that window. They are not written anywhere.

cheki.et runs on Vercel, which handles every request to serve the site and keeps its own platform logs under Vercel's privacy policy. cheki's own code does not log receipt details.

Receipts you contribute

When you send a receipt to help add a bank, it is forwarded to the maintainers' private Telegram chat and not stored by cheki.et. Telegram holds the only copy, which is deleted once the bank's parser is built. Test data in the repository is synthetic or redacted; real receipts are never committed.

To ask about your data, or to have a contributed receipt deleted sooner, see contact. More about the project is on the about page.