What happens to your data, in short
What we keep, where, who else sees it and for how long. Nothing vague.
What we keep, row by row
| What | Why | Where | Who else sees it | How long |
|---|---|---|---|---|
| Nothing. No cookies, forms, trackers or visit logs kept by us. | So you can read the pages. | Nowhere on our side. | Amazon CloudFront (AWS) delivers the pages and sees your IP address to do that. | We keep nothing. What AWS keeps to run its network follows AWS’s own rules. |
| Planned, when accounts openThe account (email, password kept only as a hash, display name), receipt photos and PDFs, the lines read from them, who added and who paid, the Telegram id, the session cookie. | To sign you in, show your receipts and receive photos from Telegram. | To be decided and written here before accounts open. | The service admin sees your email and account, not your password. Anthropic receives each photo to read it. AWS hosts the data. Your household sees what you send to the household. | To be decided before accounts open. |
What the AI does with the photos
To be read, each photo is sent to Anthropic, the company behind the Claude AI. Under Anthropic's commercial terms the photos are not used to train its models and are deleted from their systems within 30 days (longer only if flagged for misuse or required by law). They are processed outside the EU.
Checked on 9 November 2026 in Anthropic’s commercial terms and privacy center. We check it again before every publish.
What we don’t do
- We don’t ask for a bank login.
- We don’t show ads.
- We don’t use trackers from other companies on this site.
Security, concretely
- Pages are served over HTTPS only, with HSTS.
- A strict Content-Security-Policy: the page cannot load anything from other sites.
- No JavaScript and no code from other companies on this site.
Planned, when accounts open
- Passwords kept as slow, salted hashes.
- A limited number of sign-in attempts.
- Sessions you can end.
Who makes unbagbot
One household in Romania, which uses it every day. This page is a presentation, not an open service.
Before accounts open, this is where who is responsible for the data and a way to get in touch will appear.
About this page
To send you the page, Amazon CloudFront (AWS) receives your IP address and the technical details of the request. We keep no visit logs, set no cookies and have no forms.
Data controller: to be completed before accounts open.