Privacy
Privacy: what happens to your packing list
Files are processed in memory and deleted after conversion. Pages that need a second look may be sent to Google's Gemini API, which can retain data for up to 55 days under Google's terms. Uploads are not used for training.
What this page covers
This page describes what CargoSheet at packinglisttoexcel.com receives when you use it, which companies handle it, and for how long. CargoSheet has no accounts. What it handles is the file you upload, a random device ID kept in your browser, your IP address, and, if you subscribe, your email address.
A packing list can contain supplier and buyer names, product details and shipment references. Treat what you upload as you would any commercial document you send to a service provider.
What happens to a file, in order
You upload the file
The page sends it to this site's edge function, which runs on Cloudflare. The function checks the size, adds a per-browser device ID and your IP address so the free allowance can be counted, and passes the file on. If you saved a page code, it goes along too, so the service can check it and count the pages left on it.
The engine reads it
The conversion engine, which runs on Modal, extracts the text and tables from the PDF in memory. Pages that need a second look, for example scanned pages, may be sent to Google's Gemini API for a vision check.
The totals are worked out
The edge function turns the extracted tables into rows, adds them up and compares them with the declared totals. This step only handles text, not the file.
The result returns to your browser
Rows, totals and CSV text go back to the page. The file is deleted after conversion. CargoSheet does not keep the file or the result.
Downloads are built on your device
CSV and JSON are made in your browser. The .xlsx is also made in your browser, with a spreadsheet library loaded from cdnjs only when you click the button.
Who handles what
| Who | Role | What it receives | How long |
|---|---|---|---|
| Cloudflare | Hosting, edge function, DNS | The upload passing through in memory; request details such as IP address and user agent, as with any hosted site | As set out in Cloudflare's terms; the upload is not stored by CargoSheet |
| Modal | Compute for the conversion engine | The uploaded file, in memory | Deleted after conversion |
| Google (Gemini API) | Vision check of pages that need a second look | Only those pages | Up to 55 days under Google's terms |
| Google Fonts | Typefaces for the page | Your IP address and browser details when a page loads | As set out in Google's terms |
| cdnjs (Cloudflare) | Spreadsheet library for .xlsx | Your IP address, only when you click a Download .xlsx button | As set out in Cloudflare's terms |
| Payment provider | Subscriptions | The payment details you enter at checkout | To be named on this page before billing starts |
Sub-processors: Modal (compute), Google (vision check), Cloudflare (hosting) and a payment provider, to be named here before billing starts. Nothing is sold, and nothing is shared with anyone outside this list.
Privacy: questions
- Do you store my packing list?
- No. Files are processed in memory and deleted after conversion. The result is returned to your browser and CargoSheet does not keep a copy.
- Is my file used to train AI models?
- No. Uploads are not used for training.
- Does Google see my packing list?
- Only if a page needs a second look. Those pages may be sent to Google's Gemini API for a vision check, and under Google's terms for that API data can be retained for up to 55 days.
- Which companies process my data?
- Modal (compute), Google (vision check), Cloudflare (hosting) and a payment provider, which will be named here before billing starts. Google Fonts and cdnjs are also contacted by your browser, as the table above shows.
- What does CargoSheet keep about me?
- A random device ID, held in your browser, and your IP address, which the service uses to count the free allowance of 1 file per day per visitor. If you enter a page code, it is held in your browser and sent with each file, and the service keeps the count of pages left on it. If you subscribe, the email address you give us. There is no account and no password.
- Does the site use cookies?
- The site's own code sets no cookies. The device ID, and the page code if you saved one, are kept in your browser's local storage. Clearing site data for this site removes them, which also resets how the allowance is recognised. The Remove link beside the page code field removes only the code.
- Is there analytics or advertising?
- No advertising and no trackers. The site loads Cloudflare Web Analytics only if the operator turns it on; nothing else measures visits.
- Is it safe to upload a confidential packing list?
- A packing list carries commercial details, so upload only documents you are entitled to share with the companies in the table above. The terms require that. If your customer's contract forbids third-party processing, convert nothing until you have checked.
- Who can see my results?
- You can. Results are returned to the page that sent the file and are not stored by CargoSheet. Anyone with your device and browser session can see what is on your screen, as with any web page.
- How do I ask about my data?
- Email [email protected]. To remove the device ID and any saved page code, clear site data for this site in your browser.
Contact
Questions about this page or about your data: [email protected]. Use of the service is covered by the terms.
See what the converter does with a sample
The two samples run in your browser and send nothing.