Your statements stay in this tab.

What happens to your PDF

You choose a file. Your browser hands its bytes to JavaScript running on this page. The pdf.js library (Mozilla's open-source PDF reader, bundled with the site, not loaded from anywhere else) pulls out the text and its positions, and our code turns that into rows. The rows are shown on screen and written to a download when you ask. At no point is the file or any part of it sent to a server, because the page is not able to send anything.

Why it cannot send anything

Every converter and content page carries a Content-Security-Policy that includes connect-src 'none' and a default of 'none' for everything else. The single exception is the activation page, which holds no statements and may connect only to our license server. Your browser enforces it: fetch, XMLHttpRequest, WebSocket, beacons and form posts to other sites are refused. Scripts, styles and the PDF reader may only load from this site itself. There is no analytics script, no advertising tag, no font or script from a CDN, and no error-reporting service.

How to check it yourself

1. Open this site's converter in Chrome, Edge, Firefox or Safari and open developer tools (F12, or Option+Command+I on a Mac).
2. Go to the Network tab and clear it.
3. Drop a statement in, or press "Try a sample statement", and export a CSV.
4. The list stays empty. You will see no requests at all during conversion.
5. For a harder test, turn on airplane mode after the page has loaded and convert again. It works.
6. Or open the Console and run fetch('https://example.com'). The browser refuses it and names the policy that blocked it.

What is stored in your browser

• Your Pro license (the key and the confirmation from our license server), if you activate Pro, so you do not have to paste it each visit.
• A counter of free pages used today, so the daily allowance works.

Both live in your browser's local storage on this site, and clearing site data removes them. The license key leaves your browser only when you press a button on the activation page or open it with a license more than a month old: it is sent to our license server (and on to Creem) to confirm that it is valid. Nothing else is sent. Your statements and the rows read from them are held in memory only and disappear when you close or reload the tab.

What the host can see

The site is served as static files. Whoever hosts it can see ordinary web-server information when you load a page, such as your IP address and which page you requested, the same as for any website. That happens when the page loads, before you add a file, and it does not include your files. Pro checkout happens on Creem's own site after you click the Buy button, and is governed by Creem's privacy policy; the converter never sees payment details.

Limits of this promise

This protects the file from leaving the page. It cannot protect you from a compromised computer or a malicious browser extension that can read pages you open. Download statements and convert them on a device you trust.

Questions: contact@neomorrison.com