Cookies and advertising choices
Last updated September 18, 2026. Controller: AppWrapp, LLC.
Essential storage supports sign-in, security and your choices. Analytics and Meta advertising measurement are optional, separate and off until you agree. Rejecting them does not affect your receipt scanning or subscription.
| Storage | Purpose and provider | Duration |
|---|---|---|
| receipto_consent | Essential. Receipto stores the version and your separate analytics/advertising choices in this first-party cookie. | 180 days |
| Authentication/session storage | Essential. Receipto and Supabase keep you signed in and refresh your session. Payment and security providers may use necessary storage in their own flows. | Session or until sign-out/expiry; refreshed while signed in |
| AMP_* and Amplitude session-replay storage | Optional analytics. Amplitude browser identifiers, usage events and masked replay data. The amplitude_consent local-storage value mirrors your choice; it is not advertising permission. | Analytics cookies: up to 180 days. Local storage remains until cleared; collection stops when consent expires or is withdrawn. Pending replay data uses SDK-managed session/temporary storage. |
| _fbp | Optional advertising. First-party browser identifier sent to Meta through our server for public-page measurement, ad optimization and audiences. | 90 days |
| _fbc | Optional advertising. Created only when a Meta ad-click identifier is present and you agree. Connects a public-page visit to an ad click. | 90 days from that click |
What Meta receives
Only allowlisted public-page visits: the page URL without query parameters, event time and event ID, the identifiers above, IP address and browser user agent. We do not send receipt files, expense amounts or private account and workspace URLs. The website uses a server-to-server connection, not a Meta script on private pages. Meta may match events to its users and process data internationally, including in the United States. See the privacy policy for recipients, rights, legal bases and transfer information.
Change or withdraw your choice
Use Cookie settings in the footer or above. Reject optional stops new analytics and advertising collection and removes our Meta browser cookies. Consent applies to this browser, not every device. Global Privacy Control disables Meta measurement even if an older cookie allowed it. Previously transmitted events are not automatically erased; request deletion at support@receipto.app. You can also clear browser storage. We ask again after the consent cookie expires.
Mobile apps
Website cookie choices do not opt you into mobile advertising. Supported app versions offer Settings, Advertising privacy. iOS tracking additionally requires ATT authorization. Device identifiers and RevenueCat subscription events are explained in the privacy policy.