Privacy policy

Effective date: 2 October 2026

This policy explains what information Tallyproof handles when you use the website at https://tallyproof.pages.dev and the bank statement converter on it. Tallyproof is run by an individual developer (a sole trader) based in Australia. In this policy, “Tallyproof”, “we” and “us” mean that operator.

The short version: your bank statements are converted inside your own browser and are never sent to us or anyone else. We do not have accounts, we do not use tracking cookies, and we do not run analytics.

Your bank statements

When you choose a PDF statement, Tallyproof reads it with pdf.js, a PDF library that runs in your browser. The extraction, the balance checks and the creation of the CSV (or other export file) all happen on your device.

• The PDF file is never uploaded to Tallyproof’s servers or to any third party.
• The extracted transactions, balances, account details and file names are never sent anywhere.
• No network request made by Tallyproof contains any part of your statement’s contents.

The page’s security policy instructs your browser to block connections to any site other than this one and our payment provider’s licence check. You can confirm this yourself by opening your browser’s developer tools, selecting the Network tab and converting a statement: you will see no request carrying your file.

When you close or reload the page, the statement data held in your browser’s memory is discarded. Files you download (for example a CSV) are saved wherever your browser saves downloads, and are under your control.

What we do not collect

• We do not ask for your name, email address or any other details to use the free converter.
• We do not create user accounts.
• We do not use cookies or similar technologies to track you.
• We do not use analytics or advertising tools. If we add analytics in future, we will use a privacy-friendly service that does not use tracking cookies, it will never see the contents of your statements, and we will update this policy before it goes live.

Information that is processed

Hosting (Cloudflare)

The website is hosted on Cloudflare Pages. Like any web host, Cloudflare receives the standard information your browser sends when it loads a page, such as your IP address, the page requested, the time, your browser type (user agent) and similar request metadata. Cloudflare may log this information to keep the service secure and working, for example to detect and block attacks. This is the only information involved when you load the site; it does not include your statements. Cloudflare’s handling of this data is described in its privacy policy: https://www.cloudflare.com/privacypolicy/

Purchases (Polar)

Pro subscriptions and the Catch-up Pass are sold through Polar (polar.sh), which acts as the merchant of record. That means Polar, not Tallyproof, runs the checkout and processes your payment details, billing address, email address and tax information. Polar’s own privacy policy applies to that information: https://polar.sh/legal/privacy

We may receive order information from Polar that we need to provide the product and support you, such as your email address, what you bought and when, and the licence key issued to you. We do not receive your full card details.

Licence key validation

When you enter a Pro licence key, your browser sends a validation request directly to Polar. That request contains only:

• your licence key, and
• Tallyproof’s organisation ID with Polar (which identifies the seller, not you).

As with any web request, Polar will also see your IP address and browser request metadata. The request never contains statement data. The browser may repeat this check from time to time to confirm the licence is still valid.

Data stored on your device

To keep Pro unlocked and remember your settings, Tallyproof may store your licence key and your saved settings in your browser’s local storage on your device. This data stays on your device; we cannot see it. You can remove it at any time by clearing the site data for tallyproof.pages.dev in your browser settings.

When you contact us

If you email us at hello.campsitestudio@gmail.com, we receive your email address and whatever you include in the message. We use this only to reply and to keep a record of the conversation. Please do not send us your bank statements. If a statement does not convert correctly, a description of the layout (with your personal details removed) is enough for us to investigate.

Why we process this information

We process the limited information described above to:

• deliver the website and keep it secure (hosting logs);
• sell Pro and the Catch-up Pass and check that licence keys are valid (Polar);
• answer your questions and handle refunds (email).

We do not sell personal information, and we do not use it for advertising.

How long we keep it

• Support emails: kept for as long as needed to resolve your request and for record-keeping, and generally no longer than five years (to meet Australian tax record-keeping requirements where an email relates to a purchase).
• Purchase records: held by Polar under its own retention policy; any copies we hold are kept for the same tax record period.
• Hosting logs: kept by Cloudflare under its own retention practices.
• Statement data: never collected, so never retained.

Australian Privacy Principles

Tallyproof is based in Australia. We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth): collecting only what we need, being open about how we use it, keeping it secure, and letting you ask for access or correction.

You can ask us what personal information we hold about you, or ask us to correct it, by emailing hello.campsitestudio@gmail.com. If you are not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au

Overseas transfers

Cloudflare and Polar operate internationally, so information they process (such as IP addresses and purchase details) may be handled outside Australia, including in the United States and the European Union. Their privacy policies describe the safeguards they use.

If you are in the UK or the European Economic Area

If the UK GDPR or the EU GDPR applies to you, Tallyproof is the controller of the personal information it handles directly (support emails and any order information received from Polar). Polar is responsible for the information it collects at checkout.

Our legal bases are:

• performance of a contract, for selling Pro, validating licence keys and handling refunds;
• legitimate interests, for keeping the website secure and replying to messages you send us;
• legal obligation, for keeping tax and accounting records.

You have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased, where we have no legal reason to keep it;
• restrict or object to our processing;
• receive your information in a portable format;
• complain to a data protection authority. In the UK this is the Information Commissioner’s Office (https://ico.org.uk). In the EU it is the supervisory authority in your country.

To use any of these rights, email hello.campsitestudio@gmail.com. We will reply within one month.

Children

Tallyproof is a tool for managing financial records and is not directed at children.

Changes to this policy

If we change how Tallyproof handles information, we will update this page and change the effective date above. If a change affects how statement data is handled, we will say so clearly on the website before it takes effect.

Contact

Tallyproof Email: hello.campsitestudio@gmail.com

Contact: hello.campsitestudio@gmail.com