Fields in [square brackets] have not been filled in yet.
Who is responsible
The controller under the General Data Protection Regulation (GDPR) is:
- [contact email]
Invoices you open or validate
When you drop or choose a file, it is read by JavaScript inside your browser tab. Parsing, the readable view and every validation step (XML Schema, EN 16931 and XRechnung rules) run on your device. The file and its contents are not uploaded, not sent to us or to anyone else, and not stored. Closing or reloading the tab discards them.
To run the checks, your browser downloads the rule files and runtimes (for example SaxonJS and the XML Schema checker) from our host. These downloads are the same for every visitor and contain nothing from your invoice.
Hosting and server logs
The site is a set of static files hosted by Vercel Inc. (USA). When you load a page, your browser necessarily sends technical data to the host, which processes it to deliver the files and protect the service against abuse:
- your IP address
- date and time of the request
- the address of the file requested and the referring page
- your browser and operating system (user agent)
The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). We do not combine this data with other sources and do not use it to identify you. Vercel may process it in the USA; the transfer is covered by Vercel's data processing addendum, which includes the EU Standard Contractual Clauses. Vercel's privacy policy: vercel.com/legal/privacy-policy.
No cookies, analytics or tracking
This site sets no cookies and uses no analytics, advertising, tracking pixels or social media plugins. Fonts and icons are served from our own host, so no third-party servers are contacted.
Two preferences are kept in your browser's local storage, only if you change them: your theme (light/dark, key “einvoice:theme”) and your language (key “einvoice:locale”). They never leave your device and you can delete them at any time in your browser settings. Storing them is strictly necessary for a function you asked for (§ 25(2) no. 2 TDDDG).
When you email us
If you write to us (for example to join the converter waitlist), we process your email address and message to reply (Art. 6(1)(b) and (f) GDPR) and delete them once they are no longer needed, unless statutory retention periods apply.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, contact us at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work (Art. 77 GDPR).
There is no automated decision-making or profiling.
Last updated 30 October 2026