How Your Statement Stays Private: What Runs Where, How to Check
Last updated 2026-10-16
Most statement converters ask you to upload the PDF to their servers. StatementPrivate does not: the PDF is read by code running in your own browser tab, so the file never reaches us. You do not have to take that on trust, because a browser lets you watch every network request a page makes. This page says exactly what runs where and shows three ways to check.
What runs where
| Step | Where it happens | What leaves your device |
|---|---|---|
| Loading the page and the PDF reader (pdf.js) | Downloaded from statementprivate.com once, like any web page | Nothing about you or your file |
| Choosing and opening your PDF, including typing its password | In your browser tab | Nothing |
| Reading the table, merging descriptions, checking the running balance | In your browser tab | Nothing |
| Editing rows, choosing options | In your browser tab | Nothing |
| Making the Excel, CSV or OFX file | In your browser tab; the file is made in memory and saved by your browser | Nothing |
| Closing or reloading the page | Everything you opened is discarded | Nothing |
The pdf.js library is hosted on this site, not fetched from a content network or any other third party. The converter pages load no analytics, advertising or other third-party script, and set no cookies.
Check it yourself
- Watch the network. Open your browser’s developer tools (F12, or Cmd+Option+I on a Mac) and choose the Network tab. Choose a PDF in the converter. No request appears when the file is read or converted. (Requests for the page itself, its script and the PDF reader happen when the page loads, before you choose a file.)
- Go offline. After the page has loaded, switch off Wi-Fi or tick “Offline” in the Network tab, then convert a statement. It still works, because nothing needs a server.
- Read the counter. The converter shows “Network requests made by this page while reading and converting your file”, measured by your browser. The expected number is 0.
If you want to test without a real statement, the converter has a button, “Try it with an invented sample”, that loads a made-up statement.
A second lock
The pages carry a Content Security Policy that tells your browser to let scripts on the page connect only back to statementprivate.com. That is an instruction your browser enforces, so even a mistake in our code could not send your statement to another site. The one form on the site, the optional email waitlist on the Pro page, posts only to this site and asks only for an email address.
What we can see
Like any web server, the host of this site records ordinary request logs: your IP address, the time, the page requested and your browser name. They contain nothing about your statement, because nothing about it reaches the server. We have no account system, so we do not know who converts what. The privacy policy has the full list.
What this does not mean
- It does not make a conversion correct. A statement can still be read wrongly. The running-balance check shows when the numbers do not add up; it cannot prove that every description is right.
- It does not protect your own computer. Your statement is as safe as the device and browser you open it on, and the downloaded files are saved wherever your browser saves downloads.
- It is not a certification. We claim no audit or compliance standard. The claim is a technical one that you can test: the file stays in the tab.
If we ever add paid features
A future Pro option (several files at once, reconciliation reports, QuickBooks files, saved column layouts) is planned to run in the browser too. A saved layout would hold only where the columns are, never a transaction. Anything that ever needed to send a file to a server would be a separate, clearly labelled choice, off by default, and described here first.
Ready to try it? Convert a statement or read how it reads statements and checks balances.