Privacy policy

In short: this website sets no cookies. It counts visits with Umami, an open-source tool we run on our own servers in Germany, without storing your IP address. The demo runs in your browser: the PDFs, XML files and invoice data you enter are never sent to us or anyone else. The details follow.

1. Who is responsible

Responsible for this website (the controller under the GDPR) is StackForge UG (haftungsbeschränkt), Bergstraße 4, 84107 Weihmichl, Germany. For anything about your data, write to privacy@stack-forge.eu. See also the imprint.

2. This website

What it does not do

• No cookies and no other storage in your browser.
• No advertising, no tracking pixels, no tracking across other websites.
• No content from other companies. Text, images, styles, scripts and the one web font come from this server; the one exception is the statistics script described below, which comes from our own statistics server. There are no embedded videos, maps or social media buttons.
• The GitHub star count shown on the page is fetched by our server, not by your browser; GitHub learns nothing about you.
• Links to other sites, such as GitHub and npm, are plain links: the other site is contacted only if you follow one, and our pages ask your browser not to tell it where you came from.

The demo

The demo is the factur-x library running inside your browser tab. Files you choose and data you type are read into the page’s memory, processed there and discarded when you close or reload the tab. Nothing is uploaded, and nothing is stored. A file you download is created on your device. The statistics below never include anything you enter into the demo.

Visitor statistics

To see how many people visit this site and which pages they read, we use Umami, an open-source analytics tool that we run ourselves on our own infrastructure in Germany.

• Umami records the page’s address and title, the referring page if your browser sends one, your screen size and your browser’s language.
• From the request it works out your browser, operating system and device type, and an approximate location looked up from your IP address (at most country, region and city).
• Your IP address is not stored. Umami sets no cookies and stores nothing in your browser. To count several page views of one visitor as one visit, it computes a hash that changes regularly and cannot be turned back into the data it was made from.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to learn which pages are useful and to improve the site. The data is processed and stored in Germany only; we do not combine it with other data and do not pass it on. You can object to this processing at any time (Art. 21 GDPR): write to privacy@stack-forge.eu. If a content blocker stops Umami’s script, the site works the same.

Hosting and server logs

The site and the statistics server run on our own infrastructure, on servers of a hosting provider in Germany that processes data on our behalf (Art. 28 GDPR). When you open a page, your browser sends the usual request data: your IP address, date and time, the address requested, the referring page if your browser sends one, and your browser’s user agent. We keep these in server logs to deliver the site and to keep it secure, and delete them after 14 days.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a website that works and stays secure. We do not combine this data with other data and do not use it to identify you.

3. The factur-x library

The library runs wherever you install it. It makes no network requests and sends no telemetry; we receive no data from it.

4. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Write to privacy@stack-forge.eu. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77): the one responsible for us, the Bayerisches Landesamt für Datenschutzaufsicht, or the one in the EU Member State where you live or work.

5. Changes

We update this policy when the website changes. The current version is always on this page, and its history is public in the website’s repository.