Invoicer → Privacy
UK GDPR / Data Protection Act 2018
Privacy policy
Last updated: 28 July 2026
Plain English, no lawyer-speak. The short version: the invoice you build here never leaves your own computer. I never see it, and I couldn't retrieve it if you asked me to.
Who I am
I'm Jay Costen, a sole trader based in Beverley, East Yorkshire. I build websites and small software tools, of which Invoicer is one. For UK GDPR purposes I'm the data controller for any personal data this site collects.
- Trader
- Jay Costen (sole trader)
- Trading as
- Invoicer
- Based in
- Beverley, East Yorkshire
- hi@jaycosten.co.uk
- Phone
- 07709 796761
- VAT
- Not VAT registered, so no VAT is added to the price.
Your invoice data
This is the part most people care about, so it goes first.
Everything you type into the invoice form — your business details, your client's details, line items, amounts, notes — is stored in your own browser using a feature called localStorage. That data:
- is never transmitted to me or to anyone else. There's no server to send it to. This site is a set of static files;
- stays on the device you typed it on. It won't appear on your phone if you typed it on your laptop;
- is deleted when you clear your browser data, or when you press "Clear and start over" in the app.
Downloading your invoice uses your browser's own print-to-PDF. The file is generated on your machine and saved by you. It doesn't pass through me.
What is collected, and by whom
Even a static site involves a few third parties. Here's all of them, honestly:
| Who | What they receive | Why |
|---|---|---|
| Vercel hosting |
Standard server logs: your IP address, browser type, which page you requested, and when. | Serving the site and keeping it up. Legitimate interest, UK GDPR Art. 6(1)(f). |
| Stripe payments |
Only if you buy the £9 upgrade: your payment details and email, handled entirely by Stripe on their own pages. | Performing the contract, Art. 6(1)(b). I never see or store your card details. |
| HMRC | Sales records, if you buy. | Legal obligation, Art. 6(1)(c). |
That's the complete list. I don't sell data, I don't run ad trackers, and there are no marketing pixels on this site.
Cookies
This site sets no cookies at all. There's no consent banner because there's nothing to consent to.
localStorage is not a cookie — it's browser storage that stays on your device and is never sent with requests. It's used purely to remember your invoice between visits.
If I ever add analytics, I'll use a cookie-free, privacy-respecting option (Plausible or Umami), and I'll update this page before switching it on.
Affiliate links
The "Tools freelancers use" card links to third-party products. Some of those may be affiliate links, meaning I could earn a commission if you sign up. Clicking one takes you to that company's own site, where their privacy policy applies, not mine. Those links are marked and disclosed on the page. I'm not paid to recommend anything I wouldn't use.
How long anything is kept
- Your invoice data: until you delete it. It's on your device, under your control, not mine.
- Server logs: held by Vercel on their standard retention schedule, typically around 30 days.
- Sales records (if you buy): 6 years, because HMRC requires it.
Your rights
Under UK GDPR you can ask me to: tell you what data I hold about you, correct it, delete it, stop processing it, give you a portable copy, or object to processing based on legitimate interest.
In practice, unless you've bought the upgrade, I almost certainly hold nothing about you at all. Either way, email hi@jaycosten.co.uk and I'll reply within seven days and complete any request within 30 days, as the law requires.
If you're not happy
If you think I've handled your data badly and emailing me hasn't fixed it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Changes
If this policy changes, the "last updated" date at the top changes with it.