Privacy

Last updated August 2026. This page lists every request Benchnook can make and everything it can send. It is meant to be checked, not skimmed.

The short version

Your files are opened, processed and saved entirely inside your browser. They are never uploaded, and there is no server that could receive them. There is no account, no login and no profile. We cannot see your files because we never have them.

What never leaves your device

The files you open — images, PDFs, video, audio, spreadsheets, bank statements, folders.
Anything derived from them: transcripts, extracted text, EXIF data, transaction rows, thumbnails, results.
Filenames. These are not transmitted even in analytics — see below.
Anything you type into a tool, including passwords used to open or protect a PDF.

Work in progress is saved in your browser’s own storage (IndexedDB) so a reload does not lose it. That storage is local to your device and is not synced anywhere. Clearing your browser data clears it.

What does leave, and when

Anonymous usage events — always on

We record which tool was opened, the broad kind of file added (“image”, “pdf”) with its size and count as coarse buckets, which output format was saved, and whether a paywall was shown. Sizes and counts are bucketed rather than measured precisely, because an exact byte count is close to unique. No filename, no content, no identifier of any kind, and nothing that links two events to the same person. These go to Vercel Analytics on this site’s own domain.

Your licence key — only when you activate one

Activating a key sends it to our licence endpoint, which asks the payment provider whether it is valid and returns yes or no. We do not store the key, your email, or anything else about you. The answer is cached in your browser so the check does not repeat, and so it keeps working offline.

AI advisor questions — only if you turn it on

The optional advisor uses your own Anthropic or OpenAI API key, and your browser talks to that provider directly — the request never passes through us, and we never see your key. It sends summaries and derived figures for the tool you are using, never the source file. Your provider’s own privacy terms then apply. It is off until you add a key.

Map tiles — only if you click “Load detailed map”

The spending map can draw a real basemap from openfreemap.org. That fetches map imagery for the area in view; your transactions and files are not sent. Nothing is requested until you click the button.

Things this site does not do

No advertising, and no advertising or tracking networks.
No cookies for tracking. No cross-site identifiers.
No third-party scripts of any kind. The site sets browser security headers that make embedding them impossible, so this is enforced rather than promised.
No web fonts fetched at page load — typefaces are served from this domain, so your visit is not reported to a font host.
No selling or sharing of data, because there is none to sell.

For teams and procurement

Because files are processed on the device and never transmitted, Benchnook does not act as a processor of your documents and there is no document data to include in a processing register, a transfer assessment, or a retention schedule. The only personal data involved in a purchase is held by our payment provider, who acts as merchant of record. If you need this in a signed letter for a supplier review, ask and we will send one.

Changes and contact

If this page changes in a way that affects what is sent, the date above changes with it. Questions about any of the above are welcome — and if something here does not match what you observe in your browser’s network tab, we want to know.