Privacy Policy
Last updated: 10 July 2026
Short version: FreeInvoice.app runs entirely in your browser. We do not collect, store, or transmit your invoice data. We can't — your data physically never reaches our servers. The site does show Google ads on its guide pages, and those ads use cookies like ads anywhere else on the web. Both facts are explained in full below.
What we don't collect
FreeInvoice.app is a client-side application. The form fields, calculations, PDF generation, and saved-history are all executed in your browser by JavaScript that runs on your device.
We do not collect:
Your business name, address, or contact details
Your client's name, address, or contact details
Your invoice line items, amounts, or totals
Your logo
The PDFs you export
Your tax / VAT / GST numbers
There is no account to create, no login, and no password. There is nothing for us to "store securely" because we never receive it.
What lives in your browser (not on our server)
Your saved invoice history is stored in your browser's local storage — a small storage area scoped to your device and browser. It is not shared with us, with other websites, or with other browsers on the same device.
Clearing your browser data clears your invoice history.
Switching browsers or devices means your history doesn't follow you.
If you want a permanent record of an invoice, export it to PDF and save the PDF — that's the canonical record.
We cannot recover your invoice history. We never had a copy.
What does leave your browser
A small number of network requests are made for the application to work:
Static assets (HTML, CSS, JavaScript) are served from FreeInvoice.app. These are page resources, not your data.
Exchange-rate API requests when you switch currency. These contain only the currency code (e.g., "USD" → "EUR"). They contain none of your invoice data.
Google AdSense requests on pages that carry ads (see the Advertising section below). These are made by Google's ad script, not by the invoice generator, and never include anything you typed into an invoice.
The optional feedback widget on every page. If — and only if — you click it and submit a message, the message you typed is sent to our server. The widget never sends anything unless you submit it.
Standard server logs (IP address, browser type, page requested, timestamp) are kept for security and uptime monitoring. They are not joined to invoice data because we don't have invoice data.
Advertising and cookies (Google AdSense)
This site is funded by Google AdSense display ads on its guide and article pages. The invoice generator itself does not set tracking cookies, but the ads do — the same way ads work on most of the web. In plain terms:
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of a wider set of third-party vendors' personalized ads at www.aboutads.info.
If you're in the EEA, UK, or Switzerland, ad personalization is subject to the consent choices Google presents to you.
How Google uses information from sites that use its services is described at policies.google.com/technologies/partner-sites.
What the ads can never see: your invoice contents. The generator's data lives in your browser's local storage and is not readable by ad scripts on other pages. Beyond advertising, we run no analytics that identify individual users.
Your rights under GDPR / CCPA
Most data-protection rights — access, deletion, portability — apply to data a controller holds about you. Because we hold no personal data about your invoicing, there is nothing for us to access, delete, or port on your behalf.
For the limited data we do have (server logs of page requests, optional feedback messages you submit):
Access / deletion of feedback: contact us via /contact with the approximate date of your message.
Server logs: retained for up to 30 days for security purposes, then rotated.
Advertising cookies: set and controlled by Google, not by us. Exercise access/deletion rights for ad data directly through Google's My Ad Center.
Changes to this policy
If this policy changes materially (e.g., we add an account system or analytics), we will update the "Last updated" date and announce the change on the site. The privacy-by-architecture model — your data stays on your device — is core to the product and isn't planned to change.
Contact
Privacy questions: use the feedback widget on any page or visit /contact.
Try the generator
Read the policy. Open the tool. Your data stays where you control it.