Privacy
Proper private, worded carefully.
The promise is specific, because a vague privacy promise is worth nothing:
Proper Till does not send your catalogue, sales, tenders, receipts, settings or backup contents to Proper Till servers.
It is worded that way rather than "nothing ever leaves your computer" because the second sentence would not be true of any website, including this one, and you deserve the accurate version.
What we never receive
- Your products, prices, categories and till layout.
- Your sales, receipts, refunds, sessions and cash-up figures.
- How you paid, what you took, or what your day looked like.
- Your business name, address, VAT number or any settings.
- Your backup files, or anything inside them.
These stay in the browser's own database on your device. There is no account to sign into, no customer record about you, and no server-side copy of your trading, because the product has no application server at all.
No analytics, no trackers, no adverts
This site and the till load no third-party scripts, no analytics or session-replay tools, no advertising pixels, no remote fonts and no embedded widgets. Nothing here profiles you, and there are no cookie banners because there is nothing to consent to.
That is not just policy. Every release is checked by an automated test that drives the real pages in a real browser and fails the build if a single request leaves this site's own address. A promise that is only in the text of a page is a promise nobody is checking.
What a web server unavoidably sees
Proper Till is a website, so your browser must fetch its files from a host, and that host handles ordinary web traffic in the ordinary way: it sees the request for the page, your network address and the sort of browser making the request, and it may keep routine server logs. That is the same for every website you have ever opened.
What matters is the boundary: serving the app is not the same as receiving your business data. The app is delivered to you, then runs on your device and keeps its records there.
Card details: never, anywhere
Proper Till does not process card payments and never collects card details. Your own terminal takes the payment; the till simply records that a card payment of a given amount happened, so your totals add up. There is no field for a card number anywhere in the product, and there is no way to type one into a record, by design.
You may optionally note a short, non-sensitive reference from your terminal's own receipt, such as an authorisation code. The field is deliberately constrained and clearly labelled so it does not become a place staff are tempted to type things that should never be written down.
The part that is yours
Because the data is genuinely yours, protecting it is genuinely yours too. Anyone with access to the device and browser can open the till and read it, exactly as anyone with keys to your shop can open the drawer. Use your device's own lock screen and user accounts, keep your backup files somewhere sensible, and remember that a browser-based till cannot make records tamper-proof against someone who controls the machine.
If you record customer details in a future version of the product, the same rules will apply and will be documented before the feature ships, not after.
If this ever changes
Any future feature that would send your business data anywhere would be a change to the core promise of this product. It would be opt-in, explained plainly before you chose it, and described here. Until then, the promise at the top of this page is the whole of it.