Privacy policy
Last updated: 05/06/2026
Warrly is a personal tool for tracking devices, warranties, subscriptions and your “want” list. This page describes what we collect, how we store it and who we share it with. The short version: your data is yours — we do not sell it, advertise against it or track you.
1. What we store
Your email and password (stored as a bcrypt hash — the original password is never kept); the records you enter yourself (devices, warranty plans, subscriptions, wishlist); the attachments you upload (invoice / warranty-slip images); and the device push token, if you turn push on.
2. Encryption & storage
Attachments are encrypted with AES-256-GCM on the server, one key per file (each of those keys is wrapped by the system master key). Your session lives in an encrypted cookie (wv_session). All data lives on a database we run ourselves.
3. AI receipt scanning (opt-in)
This feature is OFF. by default. Only after you enable it in Settings is a receipt image you pick decrypted and sent to a third-party AI provider (Anthropic) to read the details and fill in the form. The result is always a draft — you review it before saving. With the feature off, an image never leaves the server decrypted. You can turn it back off at any time.
4. Third parties we use
- Anthropic — only when you enable AI receipt scanning (see section 3).
- Resend — sends the password-reset email when you ask for one.
- Apple (APNs), Google (FCM), your browser (Web Push) — carry warranty reminders to your devices, only when you turn push on.
Beyond those services, we share your data with nobody.
5. No ads, no tracking
No pixels, no Google Analytics, no Facebook SDK, no advertising cookies.
6. Your rights
You can export all of your data to a JSON file (Settings → Data) at any time, and delete your account to permanently erase every device, invoice, image and setting. Deleting cannot be undone.
7. Contact
Questions about your data: [email protected]