Real World Activated · Receipt Vault
A receipt worth keeping,
with nothing about you in it.
Record what was bought — merchant, item, amount, dates, terms — and this page canonicalizes the fields, computes a SHA-256 content digest, and files the record in a vault stored only in this browser. Export a record, and anyone with the file can recompute the digest and catch even a one-character edit. No account, no name, no email, no payment card. Ever.
- Create a record
- Export its JSON
- Change one character
- Watch verification fail
This browser context does not expose
crypto.subtle (usually because the page is served over plain HTTP from a non-localhost address), so
SHA-256 digests can’t be computed. Open this page from localhost, a file, or HTTPS.
01 · Create a record
The receipt, minus the customer
Only facts about the purchase go in. There are deliberately no fields for a name, email, address, or card number — a record that never contains identity can’t leak it.
02 · Your vault
Records stay in this browser
Stored under a single localStorage key on this device. Clear local
data below removes every record instantly; nothing exists anywhere else to clean up.
Saved records 0 records
No records yet. Create one above — or press Load sample receipt and save it — and it will appear here with its digest and current return and warranty status.
Open a record to inspect its canonical JSON, copy the digest, export the single record, or delete it. Statuses are recomputed from the declared terms every time this page loads.
03 · Verify & import
Trust the digest, not the file
Paste or open an exported record. This page recomputes SHA-256 over the canonical record and compares it to the digest the file declares. Edit anything — one digit of the amount — and the comparison fails.
Receipt JSON Local
Files are read locally with the File API and never uploaded. Vault exports are accepted too — every record inside is verified individually.
Verification result
No verification run yet.
What this preview does — and refuses to pretend
- It does: canonicalize purchase facts, compute SHA-256 content digests with
crypto.subtle, track return and warranty windows from declared terms, and verify exported records byte-for-byte. - It does not collect identity. There are no fields for names, emails, addresses, or payment credentials, and the record format has no place to put them.
- It does not claim merchant attestation. A digest proves a file is unchanged; only a merchant’s own signature could prove a merchant issued it, and none is claimed here.
- It does not anchor anything onchain. Records live in this browser until you export or delete them. If you separately choose to build a portable evidence passport, that is a deliberate step in the Wallet — never a side effect of saving a receipt.
- It is not a brokerage, a warranty provider, or a returns service, and it is not affiliated with or endorsed by Robinhood Markets.