TTallystick
English Deutsch Pricing Sign in
Privacy

What leaves your machine, and what does not

The invoice file is the thing people worry about. It does not leave the browser. This page is the rest of the picture: the few requests that do hit a server, who sees them, and how long they last.

Controller

Nugroho Setiaji, info@tally-stick.com. Full identity is on the imprint. There is no data-protection officer, because this is a one-person operation and none is required.

The invoice file

Parsing runs in your browser with JavaScript. The file is not uploaded, not copied to object storage, and not attached to the feedback form. A scanned or ordinary PDF with no embedded XML cannot be read here, and nothing is sent away to guess at it.

What a server does see

  • Page requests. Cloudflare hosts the site. Their edge logs a request the way any HTTPS host does (IP, URL, user agent, time). I do not run a separate analytics product on top of that.
  • Conversion counter. After a successful parse the page posts a number (how many files just succeeded, capped) to /api/count. The server stores one integer. No file name, no invoice, no cookie.
  • Feedback you send. If you use the form, the server stores the message, an optional email, a short technical context (error text, file name, file size), the page URL, your user agent, and a timestamp. The invoice itself is not attached. Copies live in a key-value store for up to one year and are emailed to the address above so I can answer.
  • Theme preference. Light or dark is saved in localStorage on your device. It is not sent to the server.

Cookies

The converter does not set a tracking cookie. Cloudflare may set cookies that belong to the host (for example to distinguish a human from a bot). I do not use them to identify you.

Legal basis and retention

Page hosting and the conversion counter are required to operate the service (legitimate interest in keeping a free tool online and honest about how much it is used). Feedback is processed because you asked for a reply or reported a defect (consent / contract-like request). You can write to the address above to have a stored feedback row deleted. Host logs follow Cloudflare's own retention.

Processors

Cloudflare, Inc. provides DNS, TLS, hosting and the key-value store. Mail delivery of feedback goes through a small Worker that can send only to the operator address. There is no advertising network and no invoice is shared with anyone.

Your rights

If the GDPR applies to a processing described above, you can ask for access, correction, deletion, restriction, or a copy, and you can complain to a supervisory authority. Write to info@tally-stick.com.