Privacy Policy
Last updated: 2026-09-29
RefundAppeal ("we") operates refundappeal.com. This page describes exactly what we collect and why. We do not sell personal data, and we do not run advertising or cross-site tracking.
What stays in your browser and is never sent to us
The details you type into the letter generator — the app name, amounts, dates and your own note — are used to build the letter in your browser. They are saved in your browser's local storage so the form survives a page reload. They are not transmitted to us, with one exception: if you ask us to email the letters to you, we need them on the server to generate that email.
What we do collect
Usage events. When you generate a letter, open the checkout, click pay, complete or cancel a payment, we record an event so we can see where people get stuck. Each event includes: which page, which app or platform you were looking at, the scenario you selected, the price shown to you, whether you added a note (not the note itself), the payment method and order reference, the referring URL, and a timestamp.
Approximate location and device. With each event we also store your city, region, country, time zone, network provider, operating system, browser, device type, and browser user-agent string. We deliberately do not store your full IP address — only a truncated network prefix (the first three blocks of an IPv4 address, or the first 48 bits of an IPv6 address), which is enough to tell repeat visits apart but does not identify you.
Your email address — only if you give it to us, in order to deliver the letters you bought or requested.
Aggregate site analytics. We use Cloudflare Web Analytics, which is cookie-free and does not fingerprint or track visitors across sites. It gives us page views, referrers, countries and device types in aggregate.
Cookies
We do not set tracking cookies. We use your browser's local storage for the things described above: your in-progress form, which price variant you were shown, and a local record of checkout actions.
Who else receives data
- Cloudflare — hosting, network security and analytics; events are stored in Cloudflare's key-value storage.
- PayPal — payment processing. When you pay, PayPal handles your card or account details directly. We never see or store your card number. PayPal's own privacy policy applies to what it collects.
- Resend — sends the emails containing your letters.
- Google Fonts — the site loads its typeface from Google's servers, which means Google receives your IP address when the font loads.
We do not share your data with anyone else, and we do not sell it.
How long we keep it
Usage events are kept while they are useful for understanding how the site performs. Email addresses are kept so we can re-send letters you paid for. Ask us and we will delete either.
Your rights
Wherever you live, you can ask us what we hold about you, ask for it to be corrected, or ask us to delete it — including under the GDPR (EEA/UK) and the CCPA/CPRA (California). We do not sell or "share" personal information as those laws define it. Email hi@refundappeal.com and we will action it. You do not need an account, so there is nothing to close.
Children
This service is not directed at children under 13 and we do not knowingly collect their data.
Contact
Privacy questions or a deletion request: hi@refundappeal.com.