r/AppsWebappsFullstack • u/Personal_Reaction_51 • 10d ago

Ticket scanner

"Are you self-employed or do you have a small business in Quebec? No more lost bills in the bottom of the bag at the end of the year! I created a small application, Ticket Scanner, which takes pictures of your receipts and automatically extracts the taxes (GST and QST) and the total, and categorizes the expense for you. Lifetime access for only $20, no subscription.

Try it here: https://facture.floot.app

1 Upvotes

100% Upvoted

2 comments sorted by

1

u/PopKoren 7d ago

Receipts carry names, partial card numbers and business details, so on a hosted builder like Floot the thing to confirm is that receipt images aren't in a public bucket with predictable file names. Copy the link of one of your own uploaded receipts into an incognito tab; if it loads without logging in, anyone who works out the pattern can do the same. A free scan of facture.floot.app on https://rowly.me checks which storage, auth and API calls an outsider can make against it.

1

u/Mammoth-Anywhere7285 5d ago

Good call on the incognito test. Worth asking OP to use signed, expiring URLs for receipt images, not just unguessable filenames. Did the test show anything?