Privacy
Most privacy policies are written to be survivable in court, not read. This one is written to be read, and it is accurate. Where something is a limitation rather than a promise, it says so.
Last updated 2 August 2026.
The short version
The documents you make here are built inside your own browser. There is no server that receives them, so we could not read your invoice if we wanted to. Everything below is the detail behind that sentence, including the parts that are less flattering.
What happens to what you type
It stays on your device. Bindery is a static site: the pages are files, the PDF engine runs in your browser, and no form value is ever sent to us. You can check this rather than trust it — open your browser’s developer tools, go to the Network tab, and fill in a tool. No request will carry your data.
Your business details, saved clients and saved styles are kept in your browser’s own local storage so the second document takes fifteen seconds instead of five minutes. Clearing your browser data clears them. That storage is on your machine; it is not a copy we hold.
The ads, and why they cannot see your document
Bindery is free and is funded by advertising. That normally means an ad company’s JavaScript runs on the same page as your form, which would let it read everything you type. We do not do that.
Every ad on this site is served from a separate address, ads.binderypress.com, inside a sealed frame. Because that is a different origin, your browser refuses to let anything inside it reach the page around it. This is not a policy we follow — it is a rule the browser enforces. The advertiser cannot see your client’s name, the amounts, or any other field.
What ad partners can do is what they do everywhere: set their own cookies inside that frame, and use your IP address, device and the page address to choose an ad. When ads are switched on you will be asked for consent first where the law requires it, and the partners in use will be named on this page.
One honest limitation: because the ad frame is a subdomain of binderypress.com, a partner could in principle set a cookie visible to the main domain. It still cannot read your document. If that ever matters, the fix is to move the frame to a completely separate domain, and we will.
What we do collect
Server logs, which are not ours
The site is hosted by Cloudflare. Like every host on the internet, Cloudflare records the requests it serves — your IP address, browser, the page requested and the time. We do not control that and it would be wrong to claim “there is no server.” The accurate statement is that there is no server that receives your document.
Analytics
One, named here because that is the deal: Cloudflare Web Analytics. It counts page views and where visitors came from. It sets no cookies, does not follow you between websites, does not build a profile of you, and cannot see anything you type — it reports the address of the page and nothing from the form on it.
Google Analytics is deliberately not wired in.The measurement ID exists in our Firebase project and has been left out of the site’s configuration on purpose, so it cannot be switched on by accident. If any other analytics is ever added, it gets named on this page before it ships, and it will never record form values.
If you sign in
Signing in is optional and no tool requires it. It exists only so a saved client book and business profile can follow you to another device. Sign-in uses Google Firebase, and the database sits in Google’s northamerica-northeast1 region in Montréal, so that data stays in Canada.
Even signed in, we store only what you deliberately save. The document you are working on stays local. Nothing syncs in the background.
The people in your client book
If you save a client, that record contains someone else’s information — their name, address and what you billed them. You are responsible for having a proper reason to hold it. We treat it as we would our own: it is only ever stored because you pressed save, it is never sold, never shared with an advertiser, and never used to train anything.
Your rights
Bindery is run from Alberta, Canada, and follows PIPEDA. If you are in Quebec, Europe or the UK, the rights you have there — access, correction, deletion, portability, and complaint to your regulator — are rights we honour regardless of where you are.
For anything held only in your browser, you already have complete control: clearing site data deletes it immediately and permanently, with no request to anyone. For anything you saved while signed in, ask and we will export it or delete it.
Children
Bindery is a business tool and is not directed at children under 13. We do not knowingly keep information from them.
Changes
When this page changes materially — a new ad partner, an analytics script, anything new being stored — the date at the top changes and the change is described rather than silently folded in.
Contact
Questions, corrections, or a request to delete something: see the contact page. Bindery is operated by Shishir Khanal, Calgary, Alberta, Canada, and published at https://binderypress.com.