Privacy policy

Sheet from PDF · Last updated 6 October 2026

This policy explains what happens to your data when you use Sheet from PDF. It is written to be read, not to be skimmed past — so it is short on purpose. Where something is technical, it says why rather than assuming you will take it on trust.

The short version

• Your statement is never uploaded. It is opened and read by your own browser. There is no upload step and no server that receives it.
• We hold no copy of your file, because we never receive it. There is nothing to delete, leak, or hand over.
• You can check the reading part yourself. Load the page, then disconnect from the internet. The statement is still read and the rows are still built, because that never needed a network connection in the first place.

What we do not collect

Not the contents of your documents, not your account numbers, not your transactions, not the amounts, not the file name, and not your bank's details. None of that is sent anywhere, because none of it leaves the page. We do not sell data to anyone, and we do not share it for advertising.

Exporting needs a connection — here is what it sends

Reading a statement and building the table happen entirely inside your browser. Exporting is the step that is paid for, so it is the one step that has to ask our server whether this account may have another conversion.

That request carries a count of what was converted: how many pages, how many rows, which bank layout was recognised, how long the reading took, and whether the balance check passed. It carries nothing else. The rows are turned into a file by your browser, and that file is never sent to us. The conversion record exists to answer questions like "which bank layout fails most often" — not "what was on this statement".

If you buy a conversion

You do not need an account, and we do not ask you for a name, an address or an email address. We do keep a record of the sale, because taking money and keeping no record of it is not something we are willing to do:

• our order reference, and the plan that was bought;
• the amount and currency;
• whether the payment succeeded, and when;
• the transaction identifiers the payment provider returns to us, so that a payment can be traced if something goes wrong.

There is no name and no email address on that record, because none was collected. That also means the record cannot be traced back to you from our side — only from the reference your browser holds.

If you create an account

An account is optional and is only needed for a subscription. If you open one, we hold:

• your email address;
• a hash of your password, never the password itself. Passwords are hashed with bcrypt, which is deliberately slow — if our database were ever exposed, the difference between that and a fast hash is the difference between a support ticket and every password being public;
• your conversions, as described above — counts and sizes, never contents;
• any review you choose to leave.

Payments

Payments are processed by PesaPal. Your card details are entered on PesaPal's own payment page and go directly to PesaPal; they never reach this site and we never see or store them.

To start a payment we send PesaPal the order reference, the amount, the currency and a short description. PesaPal sends back whether the payment completed, the method used, and a confirmation code, which we store against the order. PesaPal's own privacy policy governs what PesaPal does with that information, including any processing it carries out outside the United Kingdom.

If you ask for a refund

A refund is filed against the payment itself, so we send the provider the confirmation code they gave us for that payment, the amount, and who asked for it. We send them nothing about your document, and there is nothing about it for us to send. The money goes back to whatever paid — the same card or wallet — and that is the provider's decision, not something we can redirect somewhere else.

Cookies

We set one cookie, and only if you sign in:

• s2s_session — keeps you signed in. It is HttpOnly (scripts on the page cannot read it), SameSite=Lax, marked Secure when the site is served over https, and expires after 30 days. It holds a random session token, not your email address; what is stored on our side is a hash of that token, so a copy of our database would not let anyone sign in as you.

It is strictly necessary — without it there is no way to know which account is which — so it does not need consent. We set no tracking cookies and no advertising cookies.

Anything that is not strictly necessary is off until you agree to it. If advertising or analytics are ever switched on, a banner asks you first: nothing is loaded, and no request is made, until you have chosen. Accept and reject are offered with equal prominence, and you can change or withdraw your decision at any time from Cookie settings in the footer of every page.

What your browser stores

If you buy a conversion without an account, your browser keeps one small item in localStorage under the key s2s.guestReference: the order reference. It is there because you hold no account, so the browser is the only place the purchase can live — it is what lets you spend what you paid for when you come back.

It contains a reference and nothing else. Clearing your browser's site data removes it, and with it your ability to use that purchase, so keep it in mind before clearing.

Advertising

We do not currently show advertising on this site. The capability exists in the code and is switched off unless we turn it on — and it will not load anything at all unless you have agreed to it, as described under Cookies above.

If we ever do show advertising, third-party vendors including Google would use cookies to serve ads based on your visits to this and other websites, and you could opt out of personalised advertising at Google Ads Settings or aboutads.info. In the UK, the EEA and Switzerland, we would ask for your consent before any advertising cookie was set, and you would be able to withdraw it at any time. We would update this page before that changed, not after.

Analytics

We may use a privacy-friendly, cookieless analytics service to count visits and work out which pages are useful. If we do, it records aggregate information such as page views and referring sites. It sets no cookies, it does not build a profile of you, and it cannot see your documents. Analytics are switched off unless configured, and if we add anything that behaves differently, this page will be updated first.

How long we keep things

• Order and payment records are kept for as long as we need them for accounting and tax, which in the United Kingdom means six years. This applies to guest purchases too, and is a legal obligation rather than a choice.
• Account records are kept while your account exists, and the order records attached to it for the same six years afterwards.
• Conversion records are kept as aggregate usage data. They describe the size and shape of a job, never its contents.
• Password reset links expire after one hour and are deleted once used.
• Reviews are kept while the site runs, unless you ask us to remove yours.

Security

Passwords are hashed with bcrypt. Session tokens and licence keys are stored only as hashes, so the database on its own contains nothing that can be used to sign in or to spend a purchase. The connection to the API is encrypted in transit.

The most important protection here is structural rather than technical: your statements are never sent to us, so there is no server holding them to be breached. The security of the document itself rests with your own device, browser and network.

Your rights

Data protection law, including the UK GDPR and the EU GDPR, gives you rights over personal data held about you: to see it, correct it, delete it, restrict how it is used, receive a copy, and object to certain uses. Our lawful bases are performing our contract with you (delivering what you paid for), our legitimate interests (keeping the service secure and working), legal obligation (keeping tax records), and consent where consent is the right basis (advertising cookies, if we ever set them).

Because a guest purchase is not linked to a name or an address, there may be nothing on our side that can be traced to you — in which case there is nothing for us to retrieve, correct or erase. If you have an account, or can quote an order reference, write to hello@example.com and we will tell you what we hold and delete it if you ask, except where we are required to keep it.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ico.org.uk) in the United Kingdom, or to your local supervisory authority.

Children

This service is not directed at children, and we do not knowingly collect information from them. Purchases are for adults — see the terms of use.

Changes to this policy

If this policy changes, the date at the top of this page changes with it. Material changes will be described here rather than made quietly.

Contact

Questions about privacy, or about anything on this page, can be sent to hello@example.com. See also our terms of use.