Privacy — statements stay in this tab
Last updated 10 September 2026. Operator: Ultimatum.
Your statement is processed only in memory, in this browser tab. We cannot see it. There is no upload of PDF bytes to any server — no POST or PUT of the File, ArrayBuffer, or a data URL. We do not run a third-party conversion API. We do not send transactions to an LLM. We do not store statements, filenames, or extracted rows on a backend. Refresh or close the tab and the session is gone. If you open a password-locked statement, the password is held only as a field on that page. It is not written to localStorage and it is not placed in the URL. We do not keep an unlocked copy of the PDF.
Libraries (PDF.js, SheetJS, fonts, the PDF worker) load from this origin. That is code, not your document. After they are cached, extraction can proceed without a network. We do not use analytics that collect file names or file contents. There is no account and no cookie wall for the tool itself.
This site may later show Google ads. Ads do not receive the contents of your PDF. Until the site is Ready, you only see empty placeholders — never next to Drop, Extract, or Download. We do not ask anyone to click ads.
Hosting is not custody of the file
Hosting on HTTPS at stmt-local.vercel.app is not custody of your money and is not an upload of the PDF. Vercel may see that a browser requested the page, the worker script, and the fonts — ordinary static assets. Vercel does not receive the File object you dropped. There is no multipart form, no presigned bucket, and no “processing queue” email.
Google ads, if they ever fill the after-success / mid / footer placeholders, receive the page URL and ordinary ad signals. They do not receive PDF bytes, extracted payees, or the Notes sheet filename. Until Site Ready those placeholders stay empty. We do not run analytics that log file names.
If you email ultaultimatum@gmail.com, that message is ordinary email. That is why this policy and the contact page both say: do not attach a statement. An attachment would be the first time the operator could see your rows. We do not want that inbox to become a drop box.
Closing the tab drops the in-memory table. Downloads you saved to disk are yours to delete. We cannot remotely wipe a spreadsheet we never held.
Email ultaultimatum@gmail.com for questions about this policy. Do not attach a statement. See Contact and Terms.