Privacy

Public site

The launch public build has no analytics or advertising provider, no consent banner, and no commercial tracking. It serves static first-party files and does not need invoice data.

Any future public measurement would require a separate, reviewed consent implementation and must remain isolated from editor fields and storage.

Private editor

The editor stores the current invoice draft, a reusable seller profile, a sanitized Logo, and the interface language preference in IndexedDB on that browser. There is no account, hosted invoice history, or editor analytics endpoint.

PDF, print, and Logo processing

PDF generation and the print view start only when you choose them. PNG, JPEG, and static WebP Logos are decoded and re-encoded locally before use; rejected replacements do not erase the last accepted Logo.

Erase and retain

Erase all data requests deletion of the editor database and clears the open tabs when deletion succeeds. A blocked deletion is reported so you can close other tabs and retry. Downloaded PDFs and files saved elsewhere are not deleted by this browser action.

Operator and scope

Invoice Local is operated by an individual in China using the public name Dairy. Contact: mydate0504@gmail.com. This notice covers the public information site and the separate invoice editor. The review date identifies this text version, not a legal certification or evidence of public launch.

Hosting is different from invoice processing

Cloudflare Pages is the selected hosting provider for the production version. Delivering pages and protecting the network may involve Cloudflare processing IP addresses, request and routing information, and device or system information. Local invoice processing does not make a website visit anonymous. The editor does not send invoice fields, client details, Logos or generated PDFs to the operator or Cloudflare. Provider processing is described at https://www.cloudflare.com/policies/privacy/; that policy does not replace this notice.

Contact emails

If you choose to email the operator, your address, message and any attachments are received through Gmail and used to respond, investigate reports or handle legal requests. Sending email is separate from using the editor. Do not attach real invoices, client data or sensitive documents. Google processes email under its applicable terms and privacy policy at https://policies.google.com/privacy. Messages may be accessed by the operator in China.

Storage, retention and service providers

Browser data remains until you erase it or the browser removes it; we cannot retrieve or remotely erase it. Downloaded files and printer queues are controlled separately by your device and software. Contact correspondence is retained only as needed to resolve the matter or meet legal obligations; you may request deletion. Cloudflare and Google maintain their own service records and retention practices: the editor's erase command does not delete those records. We do not promise a fixed provider retention period or storage only in the United States. Hosting and email can involve processing in other countries.

Ordinary contact emails are kept for no more than 90 days after the matter is resolved. The operator reviews the mailbox monthly and deletes messages in time to meet this limit, including copies in Sent and Trash under the operator's control. Sensitive attachments received by mistake are deleted promptly and are not forwarded. Correspondence is used for replies, troubleshooting and privacy requests, not marketing. Records needed for a dispute or legal obligation are handled separately and retained only while that need applies. These are manually administered rules, not automatic deletion. Provider-managed backups and service records follow the provider's own practices and are outside this mailbox deletion commitment.

Tracking and your choices

This release adds no cookies, advertising, affiliate tracking, behavioral analytics, sale of personal information or sharing for targeted advertising. IndexedDB supports local editing rather than cross-site tracking. We do not track you across third-party sites; Do Not Track does not change this behavior. Browser privacy signals are not an instruction to delete local drafts. Future changes to data practices require an updated notice and any legally required choice before activation.

Requests and applicable rights

Contact mydate0504@gmail.com with a privacy question or a request to access, correct or delete correspondence we hold. Depending on applicable law, you may also have rights to object, restrict processing, obtain a copy, appeal a decision or complain to a competent authority. We may need proportionate verification without asking for invoice contents. We will explain any lawful limitation and respond within applicable deadlines. We cannot supply local invoice records we never receive. US state privacy laws have different scopes and thresholds; this notice does not claim that every statute applies or waive mandatory rights.

Security, children and changes

Local processing reduces transmission but does not protect against every threat. Shared devices, browser extensions, malware, operating-system backups and printing services may expose data. PDFs are not password-encrypted by this tool. The service is for people able to enter lawful business transactions, not directed to children under 13. If a child sends personal information by email, contact us to request its removal. Updated practices will be explained on this page; material changes will receive additional notice or consent where required. No policy can guarantee absolute security.