Privacy policy

Last updated: 2026-10-20

In short: your bank statements are read by your own browser and are never uploaded, stored or seen by us. We use Cloudflare Web Analytics, which sets no cookies. If you email us, we keep your email to answer it.

Who we are

StatementToCSV (statementtocsv.co.uk) is run by Lopamudra Naik, trading as StatementToCSV, India. For anything about this policy or your data, email [email protected]. For UK data protection law, we are the controller of the limited personal data described below.

Your bank statements

When you choose or drop a statement PDF, it is opened by JavaScript running in your browser, on your device. The transactions are worked out there, and the CSV is created there and saved straight to your computer.

• Statements are never uploaded to our servers or anyone else’s.
• We don’t store statements, transactions, file names, balances, passwords or account details. We never receive them.
• Nothing about the contents of a statement is logged or sent to analytics.
• The site sends a Content-Security-Policy that tells your browser this page may only connect to statementtocsv.co.uk and Cloudflare’s analytics endpoint. The browser blocks anything else.

The PDF reader we use (pdf.js, by Mozilla) is served from our own domain and runs in your browser.

Layout reports

If a statement doesn’t convert well, you can create a “layout report”. It is made in your browser and keeps only the position of text, dates, column headings and common banking words. Names, amounts, references and account numbers are replaced with x and 1 before you see it. It is only sent if you choose to email it to us. We use layout reports to add support for statement layouts, and may keep them as test cases.

Analytics

We use Cloudflare Web Analytics to count page views. It does not use cookies or local storage, and does not track you across sites. It records things like the page visited, the referring site, the country and the type of browser and device. It never sees the contents of a statement.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data such as your IP address to deliver pages and protect the site from abuse. See Cloudflare’s privacy policy for details.

Emails to support

If you email [email protected], we receive your email address, your message and any attachments you choose to send. We use them only to answer you and keep them so we can follow up and see the history of your request. Ask us to delete them at any time. Email to our domain is routed by Cloudflare Email Routing to our mailbox.

Payments

Pro subscriptions are sold by Dodo Payments as merchant of record. When you pay, you give your payment details to Dodo Payments, not to us. Dodo Payments shares with us what we need to provide and support your subscription, such as your name, email address, country and subscription status. Dodo Payments’ own privacy policy covers how they handle your data.

Cookies

The site sets no cookies. The checkout pages run by Dodo Payments may use their own cookies.

Legal basis and retention

We handle support emails and subscription records because we need them to answer you and to provide what you paid for (contract), and to meet tax and accounting rules (legal obligation). Support emails are kept for as long as needed to help you, and deleted on request unless we must keep them. Subscription records are kept for as long as the law requires.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Email [email protected]. If you are in the UK and unhappy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If we change this policy, we’ll update the date above and note it on the updates page. We will never start uploading statements.