Privacy Policy
Last updated: October 26, 2026
Who we are
This free invoice generator is run by BIGBANG.MA, the company behind InvoiceStamp, of Imm. 26 Bur. 9, Lot Houmane El Fetouaki 1, 40000 Marrakech, Morocco. BIGBANG.MA is the controller of the personal data this website collects. This policy covers this website only. The InvoiceStamp app has its own privacy policy, and InvoiceStamp's other websites, invoicestamp.com and its help center, list their cookies in InvoiceStamp's Cookie Policy.
What stays in your browser
The invoice you are working on (your current draft, with any logo you add) is kept in your browser's local storage on this device, so it is still there when you come back. We don't receive it while you edit. The tool doesn't keep saved products or a history of past invoices: only the current draft, and that you have seen the editor's tour. If you allow analytics, it also keeps a count described under Cookies below. Clearing this site's data in your browser deletes them.
What is sent when you download a PDF
To make the PDF, the invoice's contents (including your logo) are sent to this website's server, which checks them and has InvoiceStamp's PDF service render the file. The server adds the “Made by InvoiceStamp” mark and sends you the PDF, then asks the PDF service to delete the job and the file, also when making it failed (if that request fails, the service deletes them itself after a short time). This website doesn't keep the invoice or the PDF.
Analytics and cookies
We use Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used: the pages visited, how you arrived (a search engine or a link, for example), your device, browser and approximate location, and events such as starting an invoice, choosing a design, downloading a PDF (with the design, the document type, the currency, the number of lines and whether it has a logo) and clicking a link to InvoiceStamp. What you type into an invoice is never sent to Google Analytics: no names, addresses, amounts, client details or invoice numbers.
Your choice
On your first visit we ask before setting any analytics or marketing cookie. “Accept all” and “Reject all” are one click each, and “Choose” lets you decide per category:
- Necessary, always on: the cookie that remembers your choice, and, in local storage, your draft and whether you have seen the editor's tour.
- Analytics: Google Analytics cookies, to count visits and see which designs and features are used, and a count of how many different invoices this browser has downloaded.
- Marketing: lets Google use the data above to measure and personalise InvoiceStamp's ads, and its tag to set an ad cookie for that (see the table below).
If you refuse, or before you choose
We use Google's Consent Mode. Until you allow analytics, and if you refuse it, Google's tag still loads but sets and reads no cookies. It sends cookieless signals instead: the page, the time, your browser's user agent, the referring page, whether you have consented, and a random number generated on each page load. These carry no identifier that follows you from page to page: none is added to the site's links either. Google uses them to estimate overall use of the site. As with any request, Google sees your IP address; Google says Google Analytics 4 does not log or store it.
The cookies, and what analytics keeps in your browser
| Name | Set by, and when | Purpose | Lasts |
|---|---|---|---|
| cookie_consent | This siteWhen you make a choice | Remembers your cookie choice and the version of this policy you made it under. | 6 months |
| _ga | Google AnalyticsOnly if you allow analytics | A random ID that tells one browser’s visits apart from another’s. | 2 years |
| _ga_8THSEMBHRC | Google AnalyticsOnly if you allow analytics | Keeps track of the current visit (session). | 2 years |
| currentInvoice | This site, in local storageWhen you start an invoice | Keeps the invoice you are working on, with any logo you add, so it is still there when you come back. | Until you clear this site’s data |
| hideTutorialDialog | This site, in local storageWhen you close the editor’s tour | Remembers that you have seen the tour, so it doesn’t open again. | Until you clear this site’s data |
| fig_leads | This site, in local storageOnly if you allow analytics | Counts how many different invoices this browser has downloaded, so we know when someone comes back to make another. It keeps a scrambled fingerprint of the last invoice, never its contents. | Until you withdraw analytics or clear this site’s data |
| _gcl_au | Google’s tagOnly if you allow marketing | Links a visit to a click on an InvoiceStamp ad, to measure the ad. No advertising tag runs on this site today, so it is only set if Google’s tag does so on its own. | 90 days |
Allowing marketing lets Google use the analytics data above for advertising (ad_user_data, ad_personalization and ad_storage in Google's Consent Mode). No advertising tag, such as a Google Ads or Meta pixel, runs on this site. Google's cookies are first-party: they are set on this site's domain, not Google's. Browsers may delete cookies sooner than shown: Safari, and the other browsers on iPhone and iPad, keep a cookie that a page's script sets for at most 7 days, so there your cookie choice may be asked for again after a week.
Changing your mind
Use (also at the foot of every page) to change your choice at any time. Withdrawing analytics or marketing deletes the Google cookies already set, and withdrawing analytics deletes the download count too. Your choice lasts 6 months, and we ask again sooner if this policy changes in a way that affects it.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing: marketing stays off whatever you choose in the banner. Analytics remains your choice.
Google Analytics and Tag Manager are provided by Google Ireland Limited, which processes this data for us and may do so in the United States and other countries where it operates. For those transfers we rely on Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. How Google uses information from sites that use its services explains more. Google Analytics keeps the data for the retention period set in our Google Analytics property, at most 14 months, then deletes it.
Why we use your data
Under the UK GDPR and EU GDPR, each use needs a lawful basis:
- Making the PDF you ask for, from the invoice's contents: contract, as it is needed to give you the document.
- Counting visits and seeing how the site is used, with Google Analytics cookies and the download count: consent, which you can withdraw at any time with Cookie settings.
- Estimating overall use from cookieless signals, before or without your consent: legitimate interests, in knowing how much the site is used, with nothing that identifies you.
- Measuring InvoiceStamp's ads: consent (marketing).
- Keeping the site and the PDF service secure and working, with the technical data every request carries, such as your IP address: legitimate interests.
Sharing
We don't sell your information. We share it only with the providers that run this service for us (hosting, content delivery, the PDF service and Google Analytics), and when the law requires it.
Your rights
If you are in the UK, the EEA, or another place that grants similar rights (including under Morocco's Law 09-08), you can ask for access to the personal data we hold about you, and for it to be corrected, deleted, restricted or given to you in a portable form. You can object to what we do on the basis of legitimate interests, and withdraw your consent at any time, without affecting what was done before. This site keeps very little that could identify you: your draft never leaves your browser, and the invoice is deleted once the PDF is made.
To use a right, email [email protected]. We answer within one month. You can also complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your national data protection authority; in Morocco, the CNDP.
Governing law
This policy is governed by Moroccan Law No. 09-08 on the protection of personal data, under the supervision of the CNDP. That doesn't limit the rights the UK GDPR and EU GDPR give you if you are in the UK or the EEA: they apply in full. Subject to those rights, the competent courts of Marrakech, Morocco, hear any claim about this policy.
Contact
BIGBANG.MA, Imm. 26 Bur. 9, Lot Houmane El Fetouaki 1, 40000 Marrakech, Morocco. Questions about this policy: [email protected]; data rights and legal matters: [email protected].