Prove your revenue with Stripe or Waffo numbers

Stripe and Waffo. Stripe connects with a read-only restricted key and includes your full history. Waffo has no read-only key, so you never share one: you add our private webhook URL in your Waffo store and Waffo pushes new orders, renewals, cancellations and refunds to us. Waffo numbers count only from the day you connect.

Every Waffo webhook is signed by Waffo. We check the signature with Waffo’s production public key, refuse test-mode events, accept events only from the first store that sends them, and count each payment once even if it is delivered twice. The URL contains a secret token we store only as a hash; disconnecting turns it off. Until the first real order arrives the status is “waiting for the first event”. The page says “counted since YYYY-MM-DD” and shows “last N days” until 30 days have passed.

A Stripe restricted key (starts with rk_live_) with read-only permissions. Our link opens Stripe with the permissions already filled in; you click “Create key” and paste it here. We refuse full secret keys (sk_live_) because they can move money, and test keys because they show no real revenue.

Stripe: we list subscriptions and charges to compute four totals: MRR, revenue in the last 30 days, active subscriptions and all-time revenue, and store one row of totals per day. Waffo: for each pushed event we keep only its type, amount, currency, date and subscription period. We never store customer names, emails, addresses or tax ids.

Envelope encryption: each key is encrypted with its own random AES-256-GCM data key, and that data key is encrypted with a master key kept as a Cloudflare Worker secret. The key is decrypted only inside a sync, never logged, never shown on a page or returned by an API. Our admin sees only its last 4 characters.

Stripe: we compare the website and email domains in your Stripe account with your product’s domain; if they match, the page goes live right away, otherwise we check by hand. Waffo: events carry only the store name, which anyone can type, so every Waffo connection is checked by hand before the numbers go public. We may ask for proof, such as a file on your website.

Stripe: every 6 hours, in your account’s default currency, not converted; MRR counts active and past-due subscriptions normalized to a month, after recurring discounts; trials are not counted. Waffo: events arrive as they happen and totals are recomputed every 6 hours, in your store’s main currency; MRR uses the plan price (tax included) normalized to a month.

Any time, in Settings → Verified revenue. The Stripe key is deleted (or the Waffo webhook URL turned off) immediately. The page keeps the last numbers, marked “sync stopped” with the last sync date. Deleting your account deletes the key and all daily totals.

$19 per year per product, renewing automatically. A paid $49 Listing or $99 Featured Launch submission includes the first year. There is no free plan. If you do not renew, syncing stops and the key is deleted; the page keeps its last numbers.