Privacy

Effective November 12, 2026

Your case stays on your device

The case reference, amount, dates, service description, chronology, evidence files, previews and generated PDFs are handled only in this browser. Files are read and turned into PDFs on your device and are never uploaded to DisputePacket or anyone else; DisputePacket has no endpoint that accepts them.

By default, your case lives only in the open tab and is gone when you close it. It is stored only if you choose to:

• Save on this device: the case and copies of its attachments are kept in this browser’s IndexedDB until you delete them (“Stop saving & delete saved copy”, “Delete”, or “Erase everything DisputePacket stored in this browser”).
• Download a case file: a JSON file on your own computer containing the case and its attachments. Keep it private.

We cannot restore cases you delete or lose by clearing site data.

What reaches our server

• Checkout: the payment method you chose, the case’s random ID (a UUID that says nothing about you or the dispute), a SHA-256 case fingerprint computed in your browser from the case ID, the case fields and the SHA-256 hashes of the included files, and a random checkout attempt ID. The fingerprint is a one-way hash: no case text or file is sent, and none can be read back from it. The server creates the checkout with Square or PayPal and returns a signed ticket that your browser keeps (with no case content) so the payment survives the redirect.
• Payment verification: the server keeps the provider order identifier, the case ID, the case fingerprint, a random per-attempt value and the payment status in a private order ledger (the item is “DisputePacket Case Packet”, $39.00 USD). It checks with Square or PayPal until the provider confirms the payment or the order closes. The return link can restore the unlock in another browser; the server stores only a keyed hash of that return code.
• Unlock check: when you open a purchased case, its ID, fingerprint and purchase grant are sent so the server can confirm them.
• Rate limits use short-lived in-memory counters per IP address. They are not stored on disk.

Payments are handled on Square’s or PayPal’s own pages under their privacy policies. DisputePacket does not see or store card numbers or PayPal credentials, and never sends them case details or files.

Counters

The server counts free checklist downloads (CSV or text), cases whose free preview became complete (“preview completed”, at most once per case per visit), hosted-checkout starts and provider-confirmed live sales, with a coarse campaign label from a fixed list (for example disputepacket_launch or disputepacket_guide), the language “en”, payment provider, mode and the integer price paid. No IP addresses, cookies, case details, file names or file contents are stored with these counts. Order numbers are stored only as a keyed hash. Sandbox payments and the sample case are never counted.

Browser storage

Besides the optional saved cases above, IndexedDB holds open checkouts and purchase grants (no case content). Local storage holds the ID of a case you chose to save and a campaign label from the link you arrived by (kept 30 days). No advertising or third-party tracking scripts are used. “Erase everything DisputePacket stored in this browser” removes all of it.

Contact

Questions: contact support.