Privacy Policy
Last updated: 1 October 2026. This page describes how XML-Viewer.app treats information when you use the website and viewer.
XML-Viewer.app is built around local processing: your XML files are read and transformed in your browser. We do not operate an upload service for invoice or XML content as part of the core viewer.
What we do not collect from your files
When you open or paste XML, the content stays on your device for that browser session unless you choose to download or print a result. We do not receive your file contents from the viewer simply because you used the tool.
Technical data
Like most websites, hosting may record standard server logs (for example IP address, user agent, and requested URL) for security and reliability. This is separate from the XML you view in the app.
How we learn what to improve
We send a few notes about how the viewer is used. They help us see which features people rely on, and which ones they skip. For example, whether a file was opened, printed, or downloaded.
We can also see the kind of document, when it matches a public standard such as UBL, CII, Peppol, XRechnung, Factur-X, or FatturaPA, and roughly how large the file is. These are the names of common invoice formats, not details from your file.
The document itself stays on your device. Names, amounts, line items, the file name, and anything you search for inside the file are not sent anywhere and are not used in these notes.
Where the law says we must ask before collecting this, we will ask first.
Cookies and your choice
These notes are collected with PostHog and Google Analytics. If you visit from the EEA, the United Kingdom or Switzerland, neither service starts until you accept the banner. Declining is just as easy as accepting, and nothing is sent or stored by them until you decide.
Google Analytics also tells Google Ads when a file is opened, so we can see whether our ads bring people who use the viewer. It does not use advertising cookies or personalise ads.
The site itself sets two small first-party cookies: xmlv_analytics_consent remembers your choice for 180 days, and xmlv_region remembers whether the banner applies to you. Once analytics are allowed, PostHog and Google Analytics set their own cookies to tell returning browsers apart.
Third-party services
Fonts or other assets may be loaded from third-party CDNs when you visit the site. Those providers have their own privacy practices.
Contact
Questions about this policy or your data can be sent to hello@xml-viewer.app.