🛒COSTCOWRAPPED

Privacy Policy

Last updated: November 8, 2026

Introduction

CostcoWrapped ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the ClubHaul iOS app, website at costcowrapped.com, Chrome Extension, or bookmarklet.

Information We Collect

Account Information

When you create an account, we collect your email address and use Supabase to authenticate you. Passwords are hashed by our authentication provider and are not available to us in plain text.

Purchase Data

When you use the iOS app, Chrome Extension, bookmarklet, or supported receipt upload to import your Costco receipts, we collect:

  • Order dates and order numbers
  • Item names and descriptions
  • Item prices and quantities
  • Warehouse location (for in-store purchases)
  • Order totals

We DO NOT collect:

  • Your Costco username or password
  • Your payment card information
  • Your billing or shipping address
  • Your Costco membership number

Costco Sign-In and Import Sessions

Direct mobile imports open Costco.com on your device. You enter credentials only into Costco's page, and the resulting Costco session is used on your device to request your receipt history. We do not collect or store your Costco username, password, payment card, or membership number. The receipt data listed above is then saved to your CostcoWrapped account.

Camera and Barcode Data

If you choose to scan a product barcode in the iOS app, camera frames are processed on your device. We do not save or upload photos or video. The detected barcode may be used to search your own receipt history and show a product verdict.

Usage Data

Our website uses Mixpanel to collect page views, feature events, and basic browser or device information so we can improve the Service. Website analytics may use a persistent device or session identifier and are not described as anonymous. Session replay is disabled. The iOS app does not currently include a third-party analytics or session-recording SDK.

How We Use Your Information

We use your information to:

  • Provide and maintain our Service
  • Generate your personalized CostcoWrapped insights and statistics
  • Authenticate your account and secure your data
  • Import and search your receipt history
  • Provide barcode scanning and purchase-history comparisons
  • Send you important service-related communications
  • Improve and optimize our Service

Data Storage and Security

Your account and imported purchase data are stored using Supabase, a trusted cloud database provider. We implement industry-standard security measures including:

  • Row Level Security (RLS): Your data is isolated and can only be accessed by you
  • Encryption: All data is encrypted in transit (TLS) and at rest
  • Secure Authentication: Passwords are securely hashed and never stored in plain text

Chrome Extension Permissions

Our Chrome Extension requests the following permissions, each for a specific purpose:

tabs, scripting

Required to interact with Costco.com and extract receipt data from pages you visit

storage

Stores your CostcoWrapped sign-in session and import progress locally

Website connection

Lets costcowrapped.com connect your existing CostcoWrapped session to the extension so you do not need to sign in twice

Host permissions (costco.com, supabase.co)

Required to access Costco's receipt API and sync data to our secure database

Data Sharing

We do not sell, rent, or share your personal data with third parties except:

  • Supabase: Account authentication, database hosting, and secure data access
  • OpenAI: Purchase descriptions and shopping patterns needed to generate personalized insights; we do not send your Costco password or payment-card details
  • Mixpanel: Website product analytics; session replay is disabled
  • Legal Requirements: If required by law or to protect our rights
  • With Your Consent: If you explicitly choose to share your recap via a share link

Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Delete: Request deletion of your account and all associated data
  • Export: Download your data in a machine-readable format
  • Correct: Request correction of inaccurate data

To exercise any of these rights, please contact us at privacy@costcowrapped.com

Data Retention

We retain your data for as long as your account is active. If you delete your account, all your data will be permanently deleted within 30 days. You can request immediate deletion by contacting us.

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the new policy.

Contact Us

If you have questions about this Privacy Policy or our practices, please contact us at:

privacy@costcowrapped.com