Cookie and Storage Policy

MedBillCheckup sets no cookies. There is no session cookie, because there are no sessions: the application runs in your browser, and what it needs to remember is kept in your browser's own storage on your device. There are no analytics cookies, no advertising cookies, and no third-party trackers.

Browser storage we use

Everything below is stored on your device, by your browser, for you. All of it is strictly necessary to provide the service you asked for. When you ask for the checks, your browser sends the figures read from that bill, your corrections and your answers to the money questions, and, for the paid checks, your receipt or pass. The only thing it sends without you asking is that it renews a subscriber’s pass, or a pass from an organization’s free-access link or client link, on its own shortly before it expires. The Privacy Policy lists exactly what is sent and when.

Storage	What is in it	Why it is necessary	Lifetime
IndexedDB database `billcheck`	The bills you open, what your browser read from them, your corrections, your answers to the money questions and whether you ticked "I've compared every figure" (kept with the bill as you type them, until you run the checks for the full list), your results and letters, the receipt for each bill you paid for, your subscription pass, or a pass from an organization’s free-access link or client link, if you have one, your consent choices with the versions you agreed to, your country setting, whether you turned off Ask about your bill, what you record after asking the billing office (with what they told you on a call, the steps and dates you add, your answers in If they say no and an account number you type for a call or a letter), the addresses you type for a letter, the date you last downloaded your data, and, for Pro, the yearly maximum you saved for your health plan.	This is where your bills live. Without it the app could not show you a bill after reading it, could not remember that you paid for it, and could not remember what you consented to.	Until you erase it from Settings or clear the site's data in your browser. Uninstalling an installed app may not remove it: some browsers, Chrome among them, keep a site's data until you also clear it. Some browsers clear a site's data on their own: Safari can after about seven days without a visit, so download your data (which also holds what you recorded after asking) or the PDF of a paid list to keep a copy
`sessionStorage` (this browser tab only)	The time you ticked the EU 14-day acknowledgement while you are on the payment page, and a marker that the app already reloaded itself after an update.	Keeps that tick while you go to the payment page and come back, and stops the app reloading twice after an update.	Cleared when you close the tab
Cache Storage (kept by the service worker, and by the app for the model of Ask about your bill)	The application's own files: scripts, styles, icons and the reader components (PDF and text-recognition engines) that run on your device, the small model Ask about your bill uses (with Pro, once you ask a first question), and the app's pages you opened, kept by their address without anything after "?" (so never a payment's session number). Your bills are not in it. Neither are your questions.	Lets the app open quickly and work offline once installed.	Managed by the browser; replaced when the app updates, except the model of Ask about your bill, which stays until you turn the panel off or delete the model in Settings. Erase everything on this device removes the saved pages

Nothing is stored in localStorage. When you save a bill, restore a backup, confirm a payment or open the app from your Home Screen, the app asks your browser to keep this site's data (persistent storage), so it is less likely to be cleared on its own; your browser decides, and a refusal changes nothing else.

Article 5(3) of the ePrivacy Directive requires consent for storing information on your device, except where the storage is strictly necessary to provide a service you explicitly requested. All three entries above fall squarely within that exception: the database is the service (it holds your own bills and results, which exist nowhere else), the tab storage keeps a tick you gave while you pay, and the cache holds the application itself.

Because the app stores nothing else, there is nothing to ask you about. A banner offering to reject the storage that the service consists of would be theatre. What you are asked, separately and before the figures of a bill are sent to us, is the Health Data Consent, a different question with a different legal basis.

What we do not use

No cookies, first-party or third-party.
No third-party scripts. The pages load no external JavaScript; the Content Security Policy forbids it.
No analytics scripts, tracking pixels or fingerprinting. We count requests per page in our host's own figures, which say nothing about any person.
No advertising networks.

Payment is taken on our payment provider's own pages, on its own domain, under its own cookie policy; those pages are not part of MedBillCheckup.

Network error reports

Our host, Cloudflare, adds a network error reporting rule to the pages it serves. Some browsers, Chrome among them, keep that rule for up to 7 days. If something from our site then fails to load, for example because the connection drops, the browser may send Cloudflare a short report: the address that failed, the page it came from, the kind of failure and when it happened. A page that loads normally is never reported. The report goes to a Cloudflare address, not to our site, and holds nothing from your bills.

Your control

Settings → Erase everything on this device deletes the billcheck database in that browser, with the corrections and answers kept with each bill, and the app pages saved for offline use. Clearing the site's data in your browser's settings removes the database and the whole cache. Uninstalling an installed app may not be enough in every browser. Nothing about your bills is stored on our side.

If this ever changes

If a future version of MedBillCheckup adds a cookie, a non-essential storage use or a third-party script, we will publish the change here and ask for your consent before setting it.