Privacy Policy

• We record each check you run so the service works and gets better.
• We never sell information that identifies you, such as your email address, IP address, device ID, or your individual check history.
• We may sell or share aggregated or de-identified data, such as how often a product is checked or how many checks come back eligible, that cannot reasonably be linked back to you.
• You can use EligibleCheck as a guest. No account is needed, and guest checks are not linked to your name or email address.
• You can ask us to show you, delete, or correct your data, or to leave your data out of any data we sell, by emailing info@eligible-check.app.

What you check. The product name, link, photo, receipt, or PDF you submit, and the result we return.

Device and connection details. Your IP address, a hashed device identifier, browser and device type, and approximate location (city, region, and country) estimated from your IP address. We use these to count free checks, prevent abuse, and understand how the site is used.

Account details, if you sign up. Your email address and your plan, credit, and usage information.

Guest credit purchases. A hashed form of the email address you enter, so you can restore credits later.

Payments. Payments are processed by Stripe. We receive confirmation of the purchase but never see or store your full card number.

Feedback you send. If you use the feedback page, the subject and details you write and, only if you enter it, your email address so we can reply. We may publish the subject and details of a feature request on that page so others can vote on it; we never publish your email. Votes are tied to your account or an anonymous browser cookie.

Usage events. Pages you view and actions such as starting a check, used to understand what works on the site.

• To run checks and show you results.
• To count free checks and credits, and to process payments.
• To prevent fraud and abuse of free checks.
• To fix problems and improve accuracy, speed, and the site itself.
• To create aggregated or de-identified data, as described below.
• To respond to you when you contact us.

We use service providers that process data on our behalf to run the site:

• Google (Gemini API) receives what you submit for a check, to produce the result.
• Supabase stores our database and handles sign-in and email links.
• Vercel hosts the site and provides privacy-friendly page analytics.
• PostHog receives usage events, device type, and your IP address (used to estimate location) for product analytics.
• Stripe processes payments.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of the business, in which case this policy would continue to apply to your data.

We do not sell personal information. We may sell, license, or share aggregated or de-identified data with third parties such as researchers, retailers, or benefits companies. Examples: which products are checked most, how eligibility results break down by category, or trends over time.

De-identified data has your email address, IP address, device identifiers, and other direct identifiers removed, and is grouped or processed so it cannot reasonably be linked back to you or your device. We do not try to re-identify it, and we require anyone who receives it not to try either.

If you do not want even de-identified data derived from your checks included, email info@eligible-check.app and we will exclude it. Before we ever sell personal information, we will update this policy and give you notice and any choice the law requires first.

The products you check can hint at health conditions. We treat this information with extra care: we never sell it in a form that identifies you, and we use it only as described in this policy.

If you are concerned about your health information, use EligibleCheck as a guest. Guest checks are not linked to your name or email address. They are still recorded with an IP address and hashed device identifier so free checks can be counted.

The optional EligibleCheck Chrome extension finds FSA/HSA eligible items in your Amazon order history. It does nothing until you connect your EligibleCheck account and start a scan.

What it reads. Amazon order list and order detail pages, fetched with your own Amazon sign-in, only when you start a sync. It never syncs on a schedule or on its own. It does not read other websites and does not watch your browsing.

What is sent and stored. Order IDs, order dates, order totals, order links, item titles, Amazon product IDs, quantities, prices, item status (ordered, returned, or cancelled), and the eligibility result for each item. Item titles are sent to Google (Gemini) to produce the result, the same as a product you type into a check.

What the extension keeps in your browser. The extension does not upload Amazon's pages as they are. For each order page it builds a new, small page in your browser that holds only the fields listed above: the order number, date and total, and each item's title, product ID, quantity, price and status. Everything else on the page, such as shipping addresses, names, payment details, gift messages and store locations, is left behind. For order list pages it sends only the order numbers. We do not store page HTML. We do not use retailer eligibility labels; every verdict comes from our own check.

Connecting. Connecting gives the extension its own sign-in session for your account. Your website session is not shared with it.

Disconnecting and deleting. Disconnect Amazon on the Orders tab or in the extension signs the extension out and stops syncing; your synced orders and order history stay. To delete your synced orders, items, and order history, contact us, or delete your account to remove everything. A count of how many checks you ran this month is kept when synced orders are deleted so the monthly limit still applies; it is deleted with your account. Removing the extension from Chrome clears its local sign-in.

Data collected through the extension is handled under the Chrome Web Store User Data Policy, including its Limited Use requirements.

• A first-party cookie (ec_anon_id) and a hashed browser fingerprint count your free checks.
• Sign-in cookies keep you logged in if you have an account.
• We do not use third-party advertising cookies.

We keep check records and account data for as long as we need them to run and improve the service, meet legal obligations, and resolve disputes. You can ask us to delete your data at any time. De-identified and aggregated data may be kept longer because it no longer identifies you.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy,
• correct or delete it,
• leave data derived from your checks out of any data we sell or share.

Email info@eligible-check.app from the address on your account, or tell us roughly when you used the site as a guest so we can find your records. We may ask for details to confirm the request is yours. We aim to respond within 45 days and will not treat you differently for using these rights. Residents of California, Washington, and other states with privacy laws have these rights under those laws as well.

Data is encrypted in transit and at rest using industry-standard encryption, and access is limited to what is needed to run the service. No system is perfectly secure, but we work to protect your information.

EligibleCheck is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

We will update the date at the top when this policy changes. For material changes, such as how we sell or share data, we will post a notice on the site before the change takes effect.

Questions or requests: info@eligible-check.app, or use the contact page.