Cryptographic receipts provide verifiable deletion receipts for the right to erasure under Article 17 of the GDPR and the DSAR workflow. Only the file hash leaves the browser, ensuring zero data exposure. The receipts are verified by a public key and are independent of the server, remaining valid even if the company disappears. The operation consists of three steps: submit the case reference and file, the browser calculates the hash; the hash is recorded in an immutable registry; receive a signed PDF and a machine-readable receipt, and the deletion receipt can be verified on the Internet Computer mainnet.