Privacy notice

Last updated 26 October 2026

The short version

CSV files you upload are read in your browser and never leave it. If you connect an eBay or Etsy account, our server fetches your sales records from that platform, totals them, and sends the figures to your browser. Nothing is stored or logged. We do not run accounts. Paddle takes payment and sends your receipt.

Who is responsible

Neon Atlas Limited (company number 17390701), 61a Bridge Street, Kington, HR5 3DJ, United Kingdom, is the data controller. Contact hello@neonatlas.uk.

Your CSV files

The files you add, and every row in them, are processed in your browser. Nothing in them is uploaded to us or to anyone else. You can check this in your browser's network tools: no request carries file content.

Connected eBay and Etsy accounts

When you connect, you give eBay or Etsy permission to share your sales records with us, read-only. Our server then fetches your transactions from that platform, totals your sales, fees and postage for the tax year, and sends the figures to your browser. The platform's own privacy policy applies to the records it holds: eBay Inc. and Etsy, Inc. are separate controllers.

The access token that lets us fetch your records is held in server memory for up to 10 minutes, then discarded. We do not store your transactions, order numbers, buyer details or tokens, and we do not write them to any log. The browser receives only the dated totals and the list of items we could not count.

After you connect, the server sets one cookie, sid, that expires after 10 minutes. It only links your browser to that fetch.

Payment

Paddle is the merchant of record for the £9.99 purchase. Paddle takes your payment details, sends the receipt and processes your email address as the buyer. Paddle's buyer terms and privacy policy apply to that part of the process. We never see your card details.

What we receive when you pay

After a purchase, the page sends the Paddle transaction ID to our server. Our server checks it with Paddle and replies yes or no. We do not keep the transaction ID on our server.

What is kept on your device

After a successful check, the transaction ID is stored in your browser's local storage so the full sheet stays unlocked on that device. It never leaves your device unless you send it to us again through Restore purchase. Clear your browser's site data to remove it.

Server logs

Our server is hosted by Railway. Like any web server, the hosting platform records requests, which include IP addresses, for security and keeping the service running. We use these logs for security only. We have no other log store of our own, and how long Railway keeps them is set by Railway's own retention settings.

Lawful basis

Checking a purchase with Paddle is needed to give you what you paid for (contract). Fetching your sales from eBay or Etsy happens only when you ask for it by connecting (contract). Server logs are kept for security (legitimate interests).

Accounts and cookies

There are no accounts, no advertising and no analytics on this site. The only cookie is the short-lived sid cookie described above.

Your rights

Under UK GDPR you can ask to see, correct or erase personal data we hold about you, and object to processing. Write to hello@neonatlas.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.