Privacy Policy
InvoiceMaster is built around a simple promise: your invoice data stays on your device. Analytics is opt-in and off until you accept. This page explains exactly what that means and the few small exceptions.
What we don't collect
We do not collect, store, or transmit any of your invoice data. That includes:
- Your business name, address, tax ID, logo, or other business details
- Your clients' names, addresses, phone numbers, or any personal information
- Invoice line items, amounts, dates, notes, or any other invoice content
- Your preferences, templates, or saved drafts
All of the above lives only in your browser's local storage (IndexedDB and localStorage). It never reaches our servers because we do not run any servers for this product. InvoiceMaster is a static website — there is no backend that could receive your data even if we wanted it to.
Analytics & your consent
We use Google Analytics 4 to understand which pages get traffic, where visitors come from, and which industries and templates people care about. This helps us decide what to build next.
We want to be precise rather than reassuring: Google Analytics processes your IP address and a randomly generated client identifier. Under the GDPR and UK GDPR these count as personal data, even though we never see your name and the data is only ever used in aggregate. We do not consider this "anonymous," and we won't claim it is.
Because of that, analytics is off by default. We implement Google Consent Mode v2 with analytics_storage set to denied until you choose. When you first visit, a banner asks whether you accept analytics:
- If you Reject (or simply ignore the banner): no analytics cookie is set and no measurement data is collected. Google Analytics does not run.
- If you Accept: Google Analytics is enabled and may collect page views, referrer, approximate location (country/city from IP), device/browser/OS, and engagement signals (time on page, scroll depth, outbound clicks).
Either way, none of this is ever tied to anything you type into an invoice. Google Analytics never sees your invoice, business, or client content — that data never leaves your browser.
Cookies
If — and only if — you accept analytics, Google Analytics sets cookies (e.g. _ga) containing a random identifier to distinguish unique visitors. It does not contain your name, email, or anything you've entered. If you reject, no such cookie is set.
We do not use any advertising pixels, social-media beacons, or third-party scripts beyond Google Analytics. We store one small item in your browser's local storage (im-consent) to remember your cookie choice — this is strictly necessary and is not used for tracking.
You can change or withdraw your choice at any time:
You may also install the official Google Analytics opt-out add-on as an extra layer.
Where your data lives
When you fill in an invoice, business profile, or client record, that data is written to your browser's local IndexedDB store. It stays on your device. If you:
- Clear your browser data, all your invoices are deleted forever (we cannot recover them)
- Use InvoiceMaster on a different device or browser, your data is not synced — each device has its own local copy
- Uninstall the PWA, the underlying browser data may persist; clear it from your browser settings if you want it gone
Third parties
The only third party that receives any data from InvoiceMaster is Google (for Google Analytics). We do not share, sell, rent, or trade any information to anyone else. There are no ad networks, no marketing pixels, no data brokers.
Children
InvoiceMaster is not directed at children under 13. We do not knowingly enable analytics for, or collect data from, children.
Your rights
Your invoice, business, and client data never leaves your device, so there is nothing on our servers for us to delete, export, or correct. To remove that data, clear the site's data in your browser settings (use the Export feature first if you want a backup).
For the Google Analytics data (only collected if you accept): you can withdraw consent at any time via , which stops further collection. Under the GDPR, UK GDPR, and CCPA you also have the right to access, rectify, or erase personal data and to lodge a complaint with your supervisory authority. Because the analytics identifier is not linked to your identity we generally cannot single out your records, but email us and we will help as far as technically possible. Google's own handling is described in Google's Privacy Policy.
Changes to this policy
If we change this policy, we'll bump the "Last updated" date at the top. Material changes will be flagged in the site footer for at least 30 days.
Contact
Questions about this policy? Email us and we'll respond within a few days.