Plain-language policy

Privacy

Effective September 21, 2026 · Version 3

Who operates this site

Refund Radar is operated by Oak and Main Developers LLC, 2108 N St #13989. Oak and Main Developers LLC is the controller of the limited personal information described below.

Privacy contact: [email protected]. Please do not send account numbers, card details, government identifiers, or claim documents to that address; we do not need them and do not want to hold them.

The short version

The Refund Radar scan runs entirely in your browser. It does not require an account, connect to a bank or inbox, upload documents, or send your scan answers to us. We do not sell or share personal information, and we do not use it for behavioral advertising.

Information you enter into the scan

Your selected categories, situations, optional company name, and optional amount are held only in the page's temporary browser memory. They are never transmitted to us or to anyone else, and they are not written to cookies, local storage, or any other persistent store. They disappear when you refresh or close the page.

The site's Content-Security-Policy admits outbound connections only to Google's analytics collection endpoints, and admits scripts only from this site and the Google tag loader. Every inline script on the site is individually hash-pinned in that policy, so a changed or injected script is rejected by your own browser. You can verify this yourself in your browser's developer tools.

Cookies and analytics

Refund Radar sets no cookies of its own and uses no advertising cookies. As of Version 3 the site loads Google Analytics in its privacy-respecting configuration to count aggregate page views: no advertising cookies, no cross-site profiles, and nothing sold or shared. What you enter into the refund scan is never transmitted to us or to analytics — it stays in the page's temporary memory and disappears when you close it. Cloudflare's own analytics beacon remains switched off and still stripped at the edge. Anything beyond the aggregate Google Analytics described here would be a misconfiguration rather than an intent — please report it to [email protected] and we will correct it.

Technical request data our host processes

Refund Radar runs as static files on Cloudflare's network. It has no origin server of its own, no database, and no logging pipeline that we operate. To deliver and protect the site, Cloudflare processes standard request data on our behalf, which includes your IP address, browser and device information, the URL requested, timestamps, and security signals such as bot and attack indicators.

We do not maintain our own copy of that data, do not query it to identify individuals, and do not combine it with anything else. It is retained by Cloudflare under Cloudflare's own retention schedule for its network and security services rather than under a period we set. If we later add our own logging, analytics, or storage, this policy will be updated and re-versioned before that change goes live.

Legal basis and purpose

The only personal information processed is the technical request data above, and it is processed for a single purpose: delivering the site and protecting it from abuse. There is no marketing use, no profiling, no automated decision-making, and no sale or sharing of personal information as those terms are used in U.S. state privacy laws.

Your privacy rights

Depending on where you live, you may have the right to know what personal information is processed about you, to request access to it or a copy, to request correction or deletion, to opt out of sale, sharing, or targeted advertising, and not to be discriminated against for exercising a right.

To make a request, email [email protected] with the request you are making. We will acknowledge within 10 business days and respond substantively within 45 days, and will tell you if we need a permitted extension.

Please note the practical limit: because we hold no account, no scan answers, and no log store of our own, there is usually nothing associated with you for us to retrieve, correct, or delete. Where that is the case we will tell you so plainly rather than ask you to prove your identity for records that do not exist. An authorized agent may submit a request on your behalf where the applicable law allows it.

Links to other sites

Refund Radar links to government agencies and other third-party resources. Their privacy practices apply once you leave this site. We receive nothing back from those links, and we are not paid for any of them.

Children

Refund Radar is a general-audience informational tool and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

If the product later adds accounts, uploads, connected services, analytics, advertising, or claim handling, this policy will be updated and re-versioned before those features launch. Material changes will be reflected in the effective date and version number at the top of this page.

Version history