v0.4.1 — 13 downloaders, now with Gap

PaperPull is a family of small, local, read-only tools that download your receipts and statements as PDFs from sites you're already signed into. You log in yourself in a normal browser; the tools attach to that session and only read — they never pay, transfer, or change anything.

13 providers

Amazon · American Express · Target · Walmart · Wealthfront · Robinhood · USAA · Navy Federal · Dominion Energy · Verizon · T-Mobile · Target RedCard (TD Bank) · Gap Inc.

Highlights

• 100% local — nothing leaves your machine; no cloud, no API.
• You sign in, not the tool — it never handles your password or 2FA (attaches to your own signed-in browser over Chrome DevTools Protocol).
• Read-only by design — an allowlist + blocklist guard means no code path pays, transfers, redeems, or changes a setting.
• Delete-safe / paperless-ngx friendly — once a document downloads it's remembered; import it elsewhere and delete the PDF, and it won't re-download.
• Multi-account — separate browser profiles and folders per person, and every document is tagged with whose account it came from.
• GUI control panel plus a per-app CLI.

What's new since v0.3.1

Gap Inc. — the 13th provider. One Gap login covers Gap, Old Navy, Banana Republic, Athleta and Gap Factory, and a single history holds purchases from all of them.

• Online orders and in-store purchases, filed separately into Online\ and In-Store\. Online orders record the brand that shipped them; in-store purchases record the store. Run one kind with --online / --instore.
• Receipts come from the order-details page. Gap publishes no printable invoice and ships no print stylesheet, so the app waits for the page to load its data, hides everything outside the purchase-summary block, and renders the result — a receipt with the purchase header, line items and charge summary, and none of the site navigation.
• Note on history depth: Gap only exposes roughly the last 13 months. Older purchases are gone from the site and cannot be downloaded.

Tidier output folders, every app. Each app previously inherited the full folder list of whichever app it was cloned from, so installs grew folders that could never fill — Insurance Documents outside USAA, Other Documents everywhere, Invoices outside Target and Walmart. Every app now pre-creates only the folders it actually uses, and routing creates a folder on demand if a rare-but-real document type turns up. Nothing that holds documents changed — no files move and nothing is re-downloaded.

Getting started

Windows + Python. Clone or download, run setup-all.bat, then gui\run_gui.bat (or per app: login.bat → run_pilot.bat). See the README.

Full details in CHANGELOG.md.

v0.3.1 — 12 downloaders, local & read-only, with a GUI

PaperPull is a family of small, local, read-only tools that download your receipts and statements as PDFs from sites you're already signed into. You log in yourself in a normal browser; the tools attach to that session and only read — they never pay, transfer, or change anything.

12 providers

Amazon · American Express · Target · Walmart · Wealthfront · Robinhood · USAA · Navy Federal · Dominion Energy · Verizon · T-Mobile · Target RedCard (TD Bank)

Highlights

• 100% local — nothing leaves your machine; no cloud, no API.
• You sign in, not the tool — it never handles your password or 2FA (attaches to your own signed-in browser over Chrome DevTools Protocol).
• Read-only by design — an allowlist + blocklist guard means no code path pays, transfers, redeems, or changes a setting.
• Delete-safe / paperless-ngx friendly — once a document downloads it's remembered; import it elsewhere and delete the PDF, and it won't re-download.
• Multi-account — separate browser profiles and folders per person, and every document is tagged with whose account it came from.
• GUI control panel plus a per-app CLI.

What's new since v0.1.0

• Added Verizon (Fios), T-Mobile, and Target RedCard / Circle Card — now 12 providers.
• Security (v0.3.1): the GUI now rejects non-localhost Origin/Referer requests (CSRF hardening), and SECURITY.md documents the localhost/CDP posture.

Getting started

Windows + Python. Clone or download, run setup-all.bat, then gui\run_gui.bat (or per app: login.bat → run_pilot.bat). See the README.

Full details in CHANGELOG.md.