Privacy

This page describes the current application at km-report.app. The service operator is Sergiu Bulboaca.

Your screenshots and mileage records

The application reads selected images and spreadsheet files in your browser. It does not send their contents to a mileage database or a remote OCR service. OCR processing, spreadsheet parsing, calculations and PDF generation take place on your device.

Saved records may contain your name, delivery city, dates, distances, earnings, delivery counts, screenshots, imported trip details, filenames and edit history. Imported files can also contain addresses, purposes, workplaces and vehicle details. These are used to review your records and generate your report.

Local storage and retention

Records and your report profile are saved in this browser using IndexedDB. Your OCR language and date-order preferences use localStorage. OCR language models can be cached by the browser. There is no application expiry timer: locally saved information stays until you remove it or the browser clears it.

“Delete local records” removes saved daily records and screenshots; it does not reset the report profile or all browser caches and preferences. To remove all site data, use your browser's site-data settings for this domain. Downloaded PDF and backup files must be deleted separately from your device or cloud storage.

Website delivery and OCR downloads

The website is hosted through ChatGPT Sites and Cloudflare. Loading it sends ordinary connection information, such as your IP address, requested URL and browser information, to the hosting infrastructure. Providers may process technical logs and security information under their applicable policies. Their retention periods are not controlled by the local-record delete button.

When you start screenshot import, Tesseract.js downloads its worker, recognition engine and language models from jsDelivr if needed. Those requests disclose ordinary connection information to the download provider. The application does not attach your screenshots, mileage records or report profile to those requests.

See OpenAI privacy policy, Cloudflare privacy policy and jsDelivr privacy policy for their handling of service information, including any international processing.

Analytics, advertising and storage choices

The application code does not include advertising, visitor analytics or social-media tracking. Its local storage supports the features you use. Cloudflare currently sets a technical security cookie named __cf_bm on this domain. Infrastructure cookies are separate from your locally saved mileage records and are governed by the provider’s policies.

Support messages

If you choose Help & feedback, your subject and message text are sent to KM Report and stored in a server database hosted through ChatGPT Sites / Cloudflare. The operator reads these messages and replies to provide the support you request. This is separate from local mileage processing: screenshots, mileage records and report profiles are not attached automatically.

Conversations are available for 30 days after the last message, then become inaccessible and are deleted when the support service next handles a request. You and the operator can delete a conversation sooner. Provider backups and infrastructure logs follow provider retention policies. We also store a daily keyed hash of the connection IP, request counters and expiry timestamps for up to 24 hours to limit spam; the support database does not store the raw IP address. A short browser computation checks new submissions for automated spam.

Your private link is the access key: anyone who has it can read, send messages and delete the conversation. Only its hash is stored on the server. Keep the link private; we cannot recover a lost key. Support texts should not contain CPR numbers, payment details or unnecessary personal records.

Operator notifications

The operator can optionally enable browser push alerts. Device subscription addresses and encryption keys are stored on the server until disabled, expired by the push provider or inactive for 180 days. Push services operated by the browser vendor deliver encrypted alerts. Alerts say that a new support message has arrived and do not include your name, subject or message text.

Your control and questions

You can review and edit your local entries, download a backup and delete local records. The service operator cannot retrieve your locally stored files to correct or delete them for you. For privacy matters concerning information processed by an infrastructure provider, use that provider's privacy contact and rights procedures. Where applicable, you can complain to Datatilsynet or your local data-protection authority.

For questions or requests to the operator, use Help & feedback. Include your private conversation link only when needed to identify the conversation.

Last updated: 9 October 2026