LedgerPortSecurity and data handling
The safest way to handle a bank statement is not to receive it. LedgerPort is built so that the files you convert never reach us.
What happens to your files
- Conversion runs in your browser. The page reads the file you choose, converts it with JavaScript on your device, and hands the result to your browser to save.
- Nothing is uploaded. No file, transaction, account number or file name is sent to this site or to anyone else.
- Nothing is stored. There is no server-side copy, no history of conversions and no customer file store, because there is no server-side processing of files at all.
What is sent over the network
| When | What is sent | To whom |
|---|---|---|
| Opening a page | An ordinary web request for the page, its script, style sheet and font | This site, hosted on Cloudflare |
| Converting a file | Nothing | No one |
| Buying a licence | The details you type at checkout | Stripe, on its own payment page |
| Unlocking with a licence key | The licence key | This site, which checks it with Stripe |
How the page is locked down
- No third-party scripts. Every script that touches your files is served from this site. There are no advertising, tracking or chat scripts.
- Strict content security policy. The browser is told to refuse scripts, frames and connections from anywhere else, which limits what a compromised dependency or injected content could do.
- No cookies and no accounts. There is nothing to sign in to and no session to steal. A licence key and your last output format are kept in your browser's own storage.
- No dependencies in the converter. The code that reads and writes your files is written for this site and ships as plain, readable JavaScript.
- Encrypted in transit. The site is served only over HTTPS.
Third parties
- Cloudflare hosts the site and delivers its pages. It processes technical request data such as IP addresses.
- Stripe takes payments and issues invoices. It holds the purchase record; this site keeps no customer database.
Neither receives the files you convert.
Verify it yourself
- Open the converter, then switch off your internet connection. Convert a file: it works, because nothing needs to be sent.
- Or open your browser's developer tools on the Network tab, convert a file, and see that no request is made.
- The page's source is not obfuscated; the conversion code can be read in the browser.
For firms
Client files are not transmitted to, stored by or accessible to LedgerPort, so there is no client data for us to process on your behalf. The personal data we and our payment provider handle is limited to what a buyer enters to purchase a licence. See the privacy page, and write to support@example.com if your review needs anything further.
Questions and answers
Are converted files or their contents logged anywhere?
No. They never leave the browser, so there is nothing to log. The hosting provider logs ordinary web requests for pages and scripts, as for any website.
What happens to the file after conversion?
It stays where it was on your computer. The converted file is saved to your downloads folder by your browser. Closing the tab clears the page's copy from memory.
Does the converter work behind a firewall or offline?
Yes. After the first visit the page is kept by your browser and works with no connection. Only buying a licence and checking a licence key need the network.
Who can I contact about a security question?
Write to support@example.com. Reports of vulnerabilities are welcome and will be answered.