Lost Wallet

Lost your wallet?

A bad hour, not a bad month.

Answer three short questions and get a playbook: who to call, in the order the law rewards, with the numbers and the words to say. Then print it or save it. Five minutes, free, no account.

Your data stays on your device. We never see it, store it, or transmit it.

Everything you type stays on this device, in memory, and nowhere else, whether this is a browser tab, an iPhone, or an Android phone. There is no account, no server, no database, no analytics, and no network call. Close the tab or the app and it is gone. Save the playbook first.

Check it yourself: turn on Airplane Mode. Every step, and the PDF, keep working.

Never asked for

Full card numbers

PINs or CVVs

Social Security numbers

Photos

Your email

Your playbook holds

Card names

Last four digits

Numbers to call

What to say

What to do next

Read the whole privacy policy. It is short.

Lost is a hassle. Stolen is a race.

Debit first. It spends your own money, and the law caps your loss at $50 only if you report within two business days. Then credit: $50 at most, nothing once reported. Then your ID, then your identity. The playbook puts every call in that order, with the number beside it.

One free call places a fraud alert at all three credit bureaus: Equifax 1-800-525-6285 · Experian 1-888-397-3742 · TransUnion 1-800-680-7289. You never need to tell anyone a full card number: the last four is enough.

Not your bank, a bureau, or a lawyer. A checklist, written from the FTC's, the CFPB's, and the issuers' own public pages. Numbers checked October 2026.

Questions

What should I do first when my wallet is missing?

Lock your cards in their banking apps and look in the usual places: the car, a coat, the kitchen counter. If it is gone, call debit card issuers first, then credit card issuers, then place a fraud alert or a freeze with the credit bureaus.

Why call about debit cards before credit cards?

A debit card spends the cash in your checking account. Under Regulation E, your loss is capped at $50 only if you report within 2 business days; it can rise to $500, and after 60 days to everything. A credit card is capped at $50 under the Fair Credit Billing Act, and at nothing once reported.

Which credit bureau do I call for a fraud alert?

Any one of them; by law that bureau must tell the other two. Equifax 1-800-525-6285, Experian 1-888-397-3742, TransUnion 1-800-680-7289.

What should I say to the bank?

“I need to report a lost card. Please cancel it and send a replacement to my address on file.” Then write down the date, the time, and the name of the person you spoke to.

What if my driver's license was in it?

Request a replacement from your state licensing office, and file a police report so there is a record if someone uses your name. The playbook puts your state's office and number on the page.

Does Lost Wallet see or store what I type?

No. It runs entirely on your device. There is no account, no server, no database, and no network request after the page loads. What you type stays in memory until you close the tab or the app. It never asks for full card numbers, CVVs, PINs, or Social Security numbers.

Is this legal advice? What does it cost?

Not legal advice: a checklist, written from the FTC's, the CFPB's, and the issuers' own public pages. Your bank's own terms may protect you more than the law requires. It costs nothing: no account, no upgrade, no catch.

Lost Wallet

Privacy

Last updated November 1, 2026

The whole policy, in one line

Your data stays on your device. We never see it, store it, or transmit it.

Lost Wallet runs entirely on your device, whether that is a web browser, an iPhone, or an Android phone. No card details, no personal information, nothing you type is transmitted to any server, ours or anyone else's.

How that is true

Lost Wallet is the same program on every platform: a web page that runs in your browser, and the same code wrapped as an app for iOS and Android. There is no account, no server of ours to talk to, no database, and no email. What you type is held in memory while the page or the app is open and nowhere else: it is not written to your disk, to browser or app storage, or to a cookie.

On the web, once the page and its own files (the script and two fonts) have loaded from our host, it makes no network requests at all, to us or to anyone. The site's own security policy (a Content Security Policy header) forbids the page from connecting to any host, so a bug could not send your data either. The phone apps carry those files inside them, and Lost Wallet itself makes no network requests. You can confirm this yourself: turn on Airplane Mode, then build and save a playbook.

Tapping a link opens that organization's own website in a browser view. Lost Wallet sends nothing to it.

Close or refresh the tab, or close the app, and everything you typed is gone. That is why the browser warns you first, and why the playbook is something you print, save, or share.

What the phone shows when the app is not in front

On iPhone, the picture of the app in the app switcher is blurred whenever the app leaves the front, so a card name is not readable over your shoulder. Screenshots and screen recording still work; the playbook is something people photograph on purpose.

On Android, the three steps where you type (cards, documents, and the two choices) are blanked in the recents screen and cannot be screenshotted while they are in front. The playbook itself can be. The app is also excluded from Android's automatic backup, so nothing from it is ever copied to a Google account.

Both are settings of the phone's own window; the app reads nothing and sends nothing to make them work.

What we never ask for

Full card numbers, PINs, CVVs, expiry dates, Social Security numbers, passwords, photos. The forms refuse a full card number, and anything shaped like one in a free-text field, including the call log and the notes, is taken out before the playbook is made.

What the app measures

Nothing. No analytics, no usage counts, no crash reports, no cookies, no trackers of any kind, on any platform. The host that serves the web page (Netlify) keeps ordinary web server logs of requests for the page itself, under its own privacy policy. Apple and Google keep their own download statistics for the apps they distribute, under theirs. None of those logs contain anything you typed, because nothing you type is ever sent.

The file you save

The printed page, the PDF, the web page, and the Markdown file are made on your device and handed to you. They contain what you typed, minus anything that looked like a secret. They are yours; keep them at home, not in the wallet they describe.

On a phone, the PDF has to exist as a file for the share sheet to hand it to Files, a printer, or a message. The app writes that one file to its own private cache, which no other app can read, and deletes it: on iPhone as soon as the share sheet closes; on Android the next time you make a PDF, tap “Forget everything”, or open the app. In either case the phone clears that cache on its own when it needs the space. On Android, Save PDF also writes a copy to the folder you choose; that copy is yours and stays there until you delete it.

Who we are

Lost Wallet is run by one person in Westbrook, Maine. Write to info@lostwallet.io.

GDPR and similar laws

We process no personal data, so there is nothing to access, correct, export, or delete on our side. Everything is on your device, under your control. If you believe otherwise, write to us and we will look.

Children

Lost Wallet is not meant for children under 13. Since nothing is collected, nothing is collected from them either.

Changes

If this page changes, its date changes with it. A change that made the page or the app keep or send anything would be a different product, and would say so before you typed a word.