Privacy notice

Invoice processing

This viewer processes invoice files locally in your browser. It does not upload invoice data or store it persistently. The data remains in the page's memory while displayed. The viewer sets no cookies and loads no analytics or tracking scripts in your browser. Website requests are analysed on the server using GoAccess with shortened IP addresses. Fonts and the software for reading PDF attachments are loaded from this website.

When printing or saving a PDF, you choose the destination in the browser dialog. A file saved this way remains at your chosen location; the viewer does not delete it. Loading the website makes server requests separately from local invoice processing.

Website requests and server logs

This website is hosted by Hetzner in Nuremberg, Germany. The web servers log website requests, including IP address, time, requested address, browser information, the referring page where supplied (Referer), HTTP status and transferred data volume. These requests contain no invoice content opened by the viewer.

Access logs are rotated daily and deleted automatically after 14 days at the latest. Once a day, the self-hosted GoAccess program generates visitor statistics for the last 14 days from them. IP addresses are shortened in the process; the raw data extracted for the analysis is deleted immediately afterwards. The statistics area is password-protected.

In addition, plain counts are computed daily for this website: page views, views per page and the number of distinct visitors per day. Only these numbers are stored, no IP addresses, browser information or referring pages. Daily counts are combined into monthly totals in the middle of the following month and then deleted; monthly totals are deleted after twelve months. They are used to estimate demand for the service and say nothing about whether or which invoices were opened.

Controller

See the legal notice (German).

Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to complain to a data protection supervisory authority. Source: GDPR, Articles 15–21 and 77 (checked on 22 September 2026).