Privacy

Short version: your invoices are read in memory, checked, and thrown away. They are never written to disk, never logged, and never sent anywhere.

Who is responsible

KN MEDIA, medijske vsebine in storitve d.o.o. Meškova ulica 21, 2380 Slovenj Gradec, Slovenia VAT SI64914852. Questions: info@invoicevalidator.eu.

What happens to an invoice you upload

It is held in memory for the length of the request, validated, and discarded when the response is sent. It is not written to disk, not written to any log, and not transmitted to any third party. There is no account and no upload history, so there is nothing to retrieve or delete afterwards.

What is kept

• Anonymous daily counts. How many validations and XML extractions were attempted and how many ran, against which profile and syntax, how many passed, how many were rejected and under which fixed category (for example “file too large” or “PDF with no XML inside”), and how many pages were served. These are plain numbers per day. They contain no IP address, no identifier, no filename and no document content — the rejection category is one of a short fixed list chosen in our code, never text taken from your file.
• Anything you type into the contact form. If you write to us, your message and the address you give are stored on this server so we can answer you, and for as long as that conversation is useful. Nothing else is attached to it — no IP address, no tracking. Ask us to delete it and we will.
• A web server request log, kept for fourteen days. One line per request: the date and time, the page asked for, the result code, and the user-agent string your browser sends. It contains no IP address — the field where a web server normally writes one records only whether the request came from this machine itself or from outside.
• Nothing else. No accounts, no cookies, no analytics service, no third-party scripts, no fonts or assets loaded from anyone else's server. The page you are reading makes no request outside this domain.

IP addresses

Your IP address is held in memory only, for at most one minute, so that the service can count requests per address and refuse abusive traffic. It is not written to disk and never associated with anything you validated. This is a legitimate-interest processing under Article 6(1)(f) GDPR, limited to what abuse prevention requires.

Correction, 28 August 2026. That was true of the application but not of the machine it runs on. Until this date the web server in front of it wrote every visitor's IP address into its own log, kept fourteen days, and the application wrote them into the system log as well — so the sentence above was wrong for as long as this site has existed. Both have been switched off, and the fourteen days of web server logs already on disk were rewritten to remove the addresses. Older copies of the application's lines survive in this machine's system journal, which also holds unrelated services' logs and is not ours alone to erase; they are not read and are not linked to anything anyone validated. We would rather show you this than quietly change the page.

Where the processing happens

On a single server in Nuremberg, Germany, operated by netcup GmbH — inside the EU. No data is transferred outside the EU.

Your rights

GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. In practice there is nothing here to exercise them against: no personal data about you is stored. If you believe otherwise, write to info@invoicevalidator.eu and we will look into it. You may also complain to your national data protection authority.

Changes

If this ever stops being accurate, this page changes first.