Privacy

Last updated: November 1, 2026

KosherTag is a free site that compares kosher grocery prices, at koshertag.com (the older address shop.wolfschlesinger.com now forwards here). This page says what we collect, in plain words. “We” means the site.

The short version

• You can compare prices and use the cart without an account. Your cart stays on your phone or computer.
• We collect basic visit data, such as approximate location and device info, so we can improve the site. This is not anonymous. If you are signed in, those visits are tied to your account.
• We do not sell your information, and we don’t show ads.
• You can delete your account any time in My account.

If you make an account

We keep your email, an optional name, and your password stored only as a scrambled hash (we can’t read it). We also keep your cart, saved lists, and favorite store for each area, so they follow you to your other devices. We get an email when someone signs up, with the name and email they used.

If you write to us

The contact form saves your name, the phone or email you choose to give, your message, and a scrambled version of your IP address (so we can slow down spam). We also email that message to ourselves so we can reply.

When you visit

We keep which pages you open, what you search, taps, items you add or remove, stores you click, shares, and the area you pick. We also keep the page that sent you here, campaign tags (utm), and your device: type, operating system, browser, screen size, language, and time zone.

Our host, Cloudflare, tells us an approximate location: country, region, city, postal code, metro area, and rough coordinates, plus the network provider. We store a hashed IP address, never the readable one, and a random visitor id. If you are signed in, the visit is linked to your account id.

Receipts

If you upload a receipt (Meitiv and the other receipt-price stores), we keep the picture or PDF and the text and prices we read from it. We also keep your account id if you are signed in, or your visitor id if you are not, plus an approximate location. That is how the store’s prices get updated for everyone. A receipt our reader can’t use may be saved so we can look at it by hand. Please cover card numbers and loyalty details before you upload.

Add a list

Your list is read by our AI (Cloudflare’s AI service): the text you type, a photo of it, or a voice note you record or upload is turned into a clean list of items, and then it is gone. We do not keep the text, photo or recording. When the AI is busy or used up for the day, the list is read on your own device instead. We only keep a hashed IP, the kind of request (text, photo or voice), the time and a usage count, so we can limit how often this is used. On older browsers, voice typing may use the browser’s own speech service (for example Google or Apple).

“Did I overpay?” receipt check

A receipt you check there is read on your own device when we can. If we can’t, the pictures go to Cloudflare’s AI to be read, and we do not keep the pictures or what we read from them (except the item names below). This check doesn’t change any prices on the site. We only keep a hashed IP, the time, and whether the reading worked, so we can limit how often this is used. Usage counts (for example how many items were compared) may be kept with the visit records.

Items we couldn’t match

When a receipt check or a list has items we couldn’t match to a product, we keep just those item lines (the name and size as printed, the price, the area and the store) so we can improve matching. Nothing that links them to you is kept: no picture, totals, name, card, address, account or device, and only the day.

Shared lists

A shared list keeps the items and the area, so the link works. Anyone with the link can see it. We delete shared lists after 90 days.

Price-drop alerts

If you tap 🔔 “Alert me”, your browser asks if the site may send notifications. Only then do we save an alert address that your browser makes for this site (from Google, Apple, Mozilla or Microsoft, depending on your browser), its two encryption keys, and your alert list: the area, the item, the price and store when you set it. It has no name, email, phone number or account. Once a day, after the prices update, we compare the prices and send a notification when one dropped. The alert is sent through your browser’s push service, which sees only that a message was sent to this address (the message itself is encrypted). Turn alerts off any time in More → Price alerts; that deletes the address and the list. If your browser drops the address, we delete it too.

Barcode scan

The 📷 button opens your camera only after you tap it, and only while the scan screen is open. The barcode is read on your own device. Pictures from the camera, or a photo you pick, are never uploaded or kept. We only count that a scan was used and whether the item was found (with the visit records).

The app and offline use

The “Kosher Compare” app on Google Play opens this same site inside Chrome, full screen. It collects nothing extra: everything on this page applies the same way. The app asks for no phone permissions (notifications and the camera are asked only when you tap 🔔 or 📷). So the site (and the app) can open without internet, your browser keeps a copy of the site’s pages, code, pictures and the latest prices of the area you use (at most two areas) on your device. When you are online you always get today’s prices; the copy is only used with no internet, with a note that says which day the prices are from.

Cookies on your device

• kjg_sid keeps you signed in (90 days). Only set when you sign in.
• kjg_v is a random visitor id so we count each phone once (about 400 days).
• kjg_s is a visit id (30 minutes).
• kjg_a is the area you chose (1 year).
• The cart, chosen area, and favorite stores also sit in your browser’s local storage.

No ad cookies. You can clear cookies and site data any time. The site still works. You’ll start with an empty cart unless you sign in.

Who else sees a bit of this

• Cloudflare hosts the site, the database, and the AI that reads receipts and lists.
• Resend sends email: password resets, and notices to us when someone signs up or uses the contact form.
• cdnjs provides the PDF reader on the receipt page.
• Store websites send product pictures straight to your browser, so they see a normal request. When you open a store, that store’s own privacy rules apply.
• WhatsApp only if you choose to chat or share a list that way.
• Your browser’s push service (Google, Apple, Mozilla or Microsoft) delivers price-drop alerts, only if you turn them on.

We may also share information if the law says we have to, or to stop abuse of the site.

How long we keep it

• Your account: until you delete it.
• Contact messages: we keep them so we can answer you. There is no automatic delete date.
• Visit records: we keep them. There is no automatic delete date.
• Receipt pictures: we keep them so those prices can stay on the site. There is no automatic delete date.
• Shared lists: 90 days.
• Price-drop alerts: until you turn them off, or your browser stops the alert address.
• Items we couldn’t match: until we use or clear them.

What you can do

• Delete your account in My account. That removes the account, cart, lists, favorites, and sign-in sessions. Visit records linked to the account are not removed on their own. Contact us if you want those gone too.
• To see, fix, or delete anything else about you, use the contact form. We may need to check it’s you.
• If you live somewhere with extra privacy rights (for example California, the EU, or Québec), contact us and we’ll help.

Keeping it safe

The site uses HTTPS. Passwords are stored scrambled. Please use a password you don’t use anywhere else.

Kids

The site is for grocery shopping, not for children under 13. We don’t knowingly collect their information.

Changes

If we change this page, we’ll update the date at the top.

Contact

Questions? Use the contact form.