1 · Invoice data never leaves your browser
Files you drop in are parsed by JavaScript running on your device. Nothing is uploaded.
This is not only a promise: the site's Content-Security-Policy allows no outside destination
except Cloudflare's page-view counter (cloudflareinsights.com), and the browser
blocks every other outbound request. Two ways to check it yourself:
- Open the network panel of your browser and process a file. You will see no request carrying your file; the only outside request is the page-view beacon sent when the page loads.
- Disconnect from the network and keep working. The tool continues to function.
2 · What is stored on your device
All of the following lives in your browser's local storage, on your machine, and is never transmitted:
- Your licence key and the email it is bound to, so you do not re-enter it every visit.
- Client profiles: the accounts, tax keys and settings you enter for each client.
- Invoice numbers you have already exported, per client, so duplicates across batches can be flagged. Only the numbers — not amounts, names or files. There is a button that forgets them.
- Your own VAT identifiers, used to tell purchases from sales.
Clearing site data in your browser removes all of it.
3 · What we receive
- Web server logs. The site is hosted on Cloudflare Pages. Serving a page necessarily involves your IP address and user agent reaching the CDN.
- Page-view statistics. We use Cloudflare Web Analytics to count visits. It records the page address, the referring site, country, browser and device type, and page load timing. It sets no cookies, does not fingerprint you, and does not follow you across sites. It does not collect the files you open or anything you type. We use the counts only to learn which pages people use.
- Email you send us. If you write to support, we have that email and whatever you put in it. The built-in problem report is redacted before you see it: it contains element paths and value shapes, never values.
- Purchase data when you buy a licence: handled by the payment provider (Paddle as merchant of record for EU purchases; Stripe for other channels). We see the email address and the order, not your card details.
4 · No cookies, no advertising trackers
The site sets no cookies and loads no advertising or marketing trackers, no fonts, no chat widget and no tag manager. The only script from outside is the Cloudflare page-view counter described above, and the Content-Security-Policy keeps it from sending anything else.
5 · Your rights
Because invoice content never reaches us, there is nothing of yours for us to export or erase beyond support correspondence and purchase records. For those, write to support and we will answer within a reasonable time.