Privacy

What stays on your device

Everything you type into an invoice, your logo, the invoices and templates you save, and the draft the editor keeps as you work are stored in this browser’s storage (IndexedDB), on this device.

The PDF is made in your browser too. Nothing you type is uploaded; besides loading the site, the only thing your browser sends billsend is the anonymous usage count described below.

Other browsers and devices can’t see your invoices. Clearing this browser’s site data for billsend.io deletes them.

What leaves your device

The files you choose to save: the PDF you download, and the backup file from Export Data in the editor’s File menu. The backup includes your bank details, so keep it somewhere safe.

And the anonymous usage counts below, which never include anything you type.

Anonymous usage counts

To see roughly how billsend is used, your browser tells billsend.io when one of these happens: a page is viewed, the editor opens, a PDF is made, an invoice or template is first saved, or data is exported or imported. With the event, billsend keeps the country the request came from and the browser family, operating system and type of device (such as Safari, iOS, mobile). A page view also says which page.

That is all. The counts never include your invoices, names, amounts, currencies or anything else you type. billsend doesn’t keep your IP address, your city, your full browser details or any identifier, and saves nothing on your device for the counts, so visits can’t be linked together.

If your browser sends Global Privacy Control, nothing is counted. The counts are kept for 3 months.

What billsend doesn’t do

billsend has no accounts, no ads, no third-party analytics and no tracking of individuals, and sets no cookies.

Every page is sent with a Content Security Policy that only lets it connect to billsend.io itself, so your browser blocks any attempt to send data anywhere else, including from billsend’s own code. You can read the policy in your browser’s developer tools, or in the source on GitHub (opens in a new tab).

Hosting

billsend.io is served by Cloudflare. Like any web host, Cloudflare receives the technical details of each request your browser makes to load the site, such as your IP address and browser type, in order to deliver it and protect it from abuse, and it may set a strictly necessary security cookie for that purpose. Those requests never contain your invoices. The country and browser details of the usage-count requests are also used, in aggregate, for the counts above. Cloudflare’s handling is covered by its privacy policy (opens in a new tab).

Within a tab, the site remembers how far down each page you were (in session storage), so the Back button returns you to the same place. It is cleared when the tab closes.

Checking for yourself

The code is public on GitHub under the MIT licence, so anyone can check what billsend does with your data. Questions, or found something that doesn’t match this page? Open an issue on GitHub (opens in a new tab).