Last updated: August 27, 2026 · Operator: Sahil Tomar · Contact: [email protected]
Nothing that identifies you personally. No accounts, no email capture, no login. Petrolbillgenerator.com does not use tracking cookies, does not run advertising pixels, and does not fingerprint your browser. The form fields you type into the generator (station name, rate, volume, date, etc.) are processed entirely in your browser by client-side JavaScript and pdf-lib. Those fields never leave your device — no network request carries the form contents. Cloudflare's edge network sees only the standard HTTP request line: your IP address, the URL you visited, and the User-Agent your browser sent. That data is used for rate limiting and abuse detection; it is never joined to your form contents because we never receive them.
One server call is made per successful PDF generation: a POST to /generate/fuel. That request carries no form data, no PDF bytes, and no personally identifying information. Its only purpose is to atomically increment a Cloudflare D1 database row that stores the running total of receipts generated since launch. The counter value is fetched by GET /stats and displayed on the homepage. There is no per-session token, no cookie, no localStorage key involved in that flow. If you disable JavaScript, the counter increment simply does not fire — the tool degrades gracefully.
Our Cloudflare Worker keeps standard access logs (timestamp, IP, endpoint, HTTP status, User-Agent) for up to 30 days to detect abuse patterns. Form field contents are NOT logged because they never reach the server. Logs are inspected only when investigating suspicious traffic — for example, a script hitting the counter increment thousands of times per second. Logs older than 30 days rotate out of storage automatically and are unrecoverable. Cloudflare's own edge platform retains connection-level logs per its published privacy policy; we have no separate contract with Cloudflare above what any standard Pages + Workers deployment receives.
We store per-IP request counts in a Cloudflare D1 database with a 24-hour rolling window to prevent abuse (currently 200 generations per IP per day). Records auto-expire at midnight IST. The stored row contains the IP address, a request count, and the last-seen timestamp — nothing else. IPs used only for rate limiting are never linked to any user identity because we do not collect one. If you legitimately need a higher rate limit — say for a bulk migration of expense receipts or a load-test of your OCR pipeline — email [email protected] and we will lift the limit for your IP range.
Two third-party scripts run on the site: Google Tag Manager (which loads Google Analytics 4 for anonymous aggregate pageview counts) and the rsms.me Inter font stylesheet. Neither GA4 nor rsms.me receives any form field data. GA4 is configured to anonymise IP addresses, disable remarketing, and disable Google Signals. If you use a content blocker (uBlock Origin, Brave Shields, iOS content blockers) that blocks GA4 or GTM, the tool continues to work correctly — the analytics ping is fire-and-forget and its failure does not impact PDF generation. As of August 2026 the site does NOT run any advertising network. Adsterra ads were removed after user reports that they were hijacking traffic away from the tool.
Because we do not store user identities, form data, PDFs or session tokens, there is no personal data to export, delete or correct. The only data associated with you is the anonymised aggregate pageview counted by Google Analytics (which you can block via any content blocker) and the rate-limit counter keyed on your IP address (which auto-expires within 24 hours). If you still have a request under the DPDP Act 2023 (India), GDPR (EEA), CCPA (California) or any other data-protection regime, email [email protected] and we will respond within 30 days.
Material changes will bump the "Last updated" date at the top of this page and, where practical, be announced via a banner on the homepage for at least seven days. Non-material changes (typo fixes, clarifications) are made silently. There is no email notification because we do not have your email.
Questions, complaints, or takedown requests: [email protected]. Operator: Sahil Tomar, based in India.
Loading interactive version…