Privacy
"We" is whoever runs Unsubbed — currently a single person, based in British Columbia. "You" is you, reading this.
Your results live in your browser, encrypted.
On our server, they exist for milliseconds. Then they're encrypted, sent to you, and forgotten. We hold the unlock key for thirty minutes, then drop it. Close the tab and it's gone.
Your statement passes through. It doesn't stay.
We read it, take the transactions, drop the rest. Minutes, not days. No copy on disk.
No login. No profile. No history.
We don't know who you are, and we'd rather not.
The boring part
Where things go
- Google GeminiThe text of your statement goes here, briefly, for one job: turning the mess into a list of transactions. We don't ask Google to keep it.
- VercelHosts the front end. They see request logs — your IP, browser, page — while pages load. Your statement never passes through them.
- RailwayHosts the back end. Your statement arrives here to be parsed, sits as a temp file for the moment we need it, then it's gone.
- Cloudflare TurnstileBot check. It sees a token from your browser, not your statement.
- StripePayment. We never see your card. They see what they need to charge it.
- UmamiCounts page views. No cookies. No IP stored. No profile.
- LogfireOur server's diary. Records timing, file counts, errors — never the contents of your statement.
Most of them are US services. Your statement crosses there briefly. There's no version of this product that doesn't.
What we keep
On our server
Almost nothing. Statements live as temp files while we parse them — then gone. The encryption key for your results stays thirty minutes. Stripe payment IDs stick four days so we don't double-charge. Your IP sits in memory fifteen minutes for rate-limiting. We look up your country from it once for pricing, then forget it.
In your browser
The encrypted result lives in sessionStorage. Once you unlock, the decrypted one joins it — your browser needs it to render the page. Both die when you close the tab.
How we score
A scoring algorithm guesses which charges look like subscriptions. It's a guess — you confirm or dismiss each one. Nothing here makes a decision about you. It's sorting your transactions, not you.
Your rights
- Access
- open the tab. That's all we have.
- Delete
- close the tab.
- Anything else
- privacy@unsubbed.app— we'll answer.
- EU/UK
- you can also complain to your local data protection authority.
We don't sell your data. We don't keep it.
Not for kids
Don't use Unsubbed if you're under sixteen.
Changes & contact
When this page changes, the date below changes.
Questions, complaints, requests: privacy@unsubbed.app
Also: Terms.