Verify a withdrawal receipt
Every withdrawal declaration made through Cooloff has a receipt hash: the SHA-256 of the declaration's content together with the exact time it was received. It appears on the evidence PDF the merchant can produce for any declaration. Change one character of the content or the time and the hash changes.
Enter the fields exactly as they appear on the evidence document and compare the result.
What this proves — and what it does not
It proves: that the values shown are exactly the ones the hash was made from. If the computed value matches the one on the evidence document, the content has not been altered.
It does not prove: that the merchant still holds the declaration. A hash secures content, not retention. The consumer's independent evidence is the acknowledgement of receipt sitting in their own mailbox — outside the merchant's reach, and precisely what Article 11a(4) of Directive 2011/83/EU requires.
Why there is no proof URL on our server: such an address requires the vendor to keep data about every declaration on a server of its own. Cooloff keeps none. The records stay inside the merchant's website, and the check happens here in your browser. You cannot have both.
How the hash is formed
SHA-256 over exactly this JSON structure, in this order, with no whitespace:
{"name":…,"contractRef":…,"email":…,"message":…,"submittedAt":…,"lang":…}
If there was no message, the value is an empty string. submittedAt is the ISO-8601
instant in UTC. The short reference CO-XXXX-XXXX is the first eight hex characters of the
hash, uppercased.