Privacy policy

Last updated: 28 July 2026

Plain English, no lawyer-speak. The short version: the invoice you build here never leaves your own computer. I never see it, and I couldn't retrieve it if you asked me to.

Who I am

I'm Jay Costen, a sole trader based in Beverley, East Yorkshire. I build websites and small software tools, of which Invoicer is one. For UK GDPR purposes I'm the data controller for any personal data this site collects.

Trader: Jay Costen (sole trader)
Trading as: Invoicer
Based in: Beverley, East Yorkshire
Email: hi@jaycosten.co.uk
Phone: 07709 796761
VAT: Not VAT registered, so no VAT is added to the price.

Your invoice data

This is the part most people care about, so it goes first.

Everything you type into the invoice form — your business details, your client's details, line items, amounts, notes — is stored in your own browser using a feature called localStorage. That data:

is never transmitted to me or to anyone else. There's no server to send it to. This site is a set of static files;
stays on the device you typed it on. It won't appear on your phone if you typed it on your laptop;
is deleted when you clear your browser data, or when you press "Clear and start over" in the app.

Downloading your invoice uses your browser's own print-to-PDF. The file is generated on your machine and saved by you. It doesn't pass through me.

The practical implication: because I hold nothing, I can't recover your invoices if you clear your browser or switch device. Keep your own copies of the PDFs you generate.

What is collected, and by whom

Even a static site involves a few third parties. Here's all of them, honestly:

Who	What they receive	Why
Vercel hosting	Standard server logs: your IP address, browser type, which page you requested, and when.	Serving the site and keeping it up. Legitimate interest, UK GDPR Art. 6(1)(f).
Stripe payments	Only if you buy the £9 upgrade: your payment details and email, handled entirely by Stripe on their own pages.	Performing the contract, Art. 6(1)(b). I never see or store your card details.
Vercel Web Analytics visitor counts	An aggregated page view: which page, roughly where in the world, and what kind of device. No cookies, no fingerprinting, and no identifier that can follow you to another site.	Knowing which pages are actually useful. Legitimate interest, Art. 6(1)(f).
Google Play Android app only	Only if you buy the £9 upgrade in the Android app: your purchase is handled entirely by Google Play. I receive an anonymised sales report, never your payment details.	Performing the contract, Art. 6(1)(b).
HMRC	Sales records, if you buy.	Legal obligation, Art. 6(1)(c).

That's the complete list. I don't sell data, I don't run ad trackers, and there are no marketing pixels on this site.

The Android app

The Invoicer app on Google Play is more private than this website, not less. It ships with no analytics at all — the visitor counting described above is stripped out of the app build — and it makes no network requests of its own. Everything you type stays in the app's own storage on your phone.

The one exception is buying Pro. Purchases in the app go through Google Play Billing rather than Stripe, because Google requires it. Google handles the payment on their own screens and under their privacy policy. I never see your card details. Google tells the app one thing only: whether this Google account owns the upgrade.

Deleting the app removes everything it stored. There's no account to close and nothing left behind on a server, because there is no server.

No third-party fonts either. Most sites load their typefaces from Google Fonts, which quietly sends every visitor's IP address to Google. The fonts here are served from this domain instead, so that request never happens. It also makes pages load slightly faster.

Cookies

This site sets no cookies at all. There's no consent banner because there's nothing to consent to.

localStorage is not a cookie — it's browser storage that stays on your device and is never sent with requests. It's used purely to remember your invoice between visits.

The site does count page views, using Vercel Web Analytics. It's cookie-free by design: it sets nothing on your device, doesn't fingerprint your browser, and produces no identifier that could track you across other sites. That's why there's still no consent banner — under PECR, consent is required for storing or accessing information on your device, and this stores nothing.

Affiliate links

The "Tools freelancers use" card links to third-party products. Some of those may be affiliate links, meaning I could earn a commission if you sign up. Clicking one takes you to that company's own site, where their privacy policy applies, not mine. Those links are marked and disclosed on the page. I'm not paid to recommend anything I wouldn't use.

How long anything is kept

Your invoice data: until you delete it. It's on your device, under your control, not mine.
Server logs: held by Vercel on their standard retention schedule, typically around 30 days.
Sales records (if you buy): 6 years, because HMRC requires it.

Your rights

Under UK GDPR you can ask me to: tell you what data I hold about you, correct it, delete it, stop processing it, give you a portable copy, or object to processing based on legitimate interest.

In practice, unless you've bought the upgrade, I almost certainly hold nothing about you at all. Either way, email hi@jaycosten.co.uk and I'll reply within seven days and complete any request within 30 days, as the law requires.

If you're not happy

If you think I've handled your data badly and emailing me hasn't fixed it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes

If this policy changes, the "last updated" date at the top changes with it.