Coming soon · launch privacy notice

Amazon Invoice Downloader privacy.

Myth & Byte · October 12, 2026 · support@mythandbyte.com

What the extension reads

The extension reads supported Amazon.com Orders and invoice pages after the user enables local invoice tools in the menu. Scans and exports run when started by the user. After consent, inline badges automatically read visible order IDs and supported invoice links on recognized Orders pages to show tracked download status.

It uses order IDs and invoice URLs, including document/shipment selectors, to associate detected invoices with download records. For filenames, CSVs and reports it may read order dates, full item descriptions, quantities, unit prices, line totals, seller names, product identifiers, document totals, tax, shipping and discounts when available. PDF copies reproduce the supported invoice page as printed by Chrome, including personal details Amazon displays there, such as names or delivery/billing addresses, even when those details are not extracted into CSV fields.

The extension does not ask for or read Amazon passwords or authentication cookies. It relies on the user's signed-in Amazon pages and does not create a separate extension account.

Local retention and encryption

Consent, output preferences, selected period/format and an opaque history-change revision are stored in Chrome extension local storage. Recent run state, logs, extracted CSV data and the durable invoice-download ledger are stored as authenticated encrypted records in this extension's browser IndexedDB database. Only the latest run is retained; its activity list keeps up to 500 events.

The ledger can include invoice identities, order IDs, requested and actual filenames, download IDs and completion dates. Completed records remain after a PDF moves or Chrome download history is cleared; deliberate additional copies keep separate tracking records. This retained data supports restart recovery, retries, saving the latest CSV again and duplicate checks.

The internal run and ledger records use AES-256-GCM with a new random IV for each encrypted write. A per-installation, nonextractable CryptoKey is retained in the same browser profile. The extension decrypts records locally to provide its features. Nonextractable means the key cannot be exported through the Web Crypto API; it does not make the records inaccessible to a compromised extension, browser profile or device. The extension does not configure operating-system disk encryption or backups.

An upgrade migrates legacy plaintext run/history records to encrypted storage and verifies them before deleting the legacy copies. If initialization, migration or record decryption fails, the extension preserves existing data and blocks operations that could replace history or create duplicate exports. Reload the extension from Chrome’s extensions page to retry initialization after a read error. Clear local history is an explicit recovery option that discards tracking. Legacy deletion is logical removal, not secure erasure of historical deleted storage bytes, backups or copies held by other software.

Clear local history removes the latest run and download ledger and resets their encryption key. Consent, preferences, quota and license records remain. Removing the extension or clearing its browser-profile data removes its extension data. Lost tracking can permit repeated downloads and removes earlier badge evidence.

Monthly allowance and pending downloads

The free allowance is five distinct successfully exported invoice documents in the current browser-local calendar month when an export succeeds. Selecting an older invoice period does not change the allowance month. PDF, CSV, combined exports and all scopes share the same browser-profile count. The normalized invoice document URL is hashed with SHA-256 for quota tracking; this is a stable identifier, not a guarantee that the underlying invoice is anonymous.

A PDF counts after Chrome confirms download completion. A CSV document counts when either the summary or line-item file containing its data completes, including when its companion file fails. If neither file delivers document data, no credit is charged. Combined PDF/CSV output, repeats, re-saves and retries of the same document in the same month do not add another credit. Known failed exports release their reservations.

Pending exports retain document hashes, local download IDs, filenames and operation information so Chrome completion records can be reconciled after interruption. If completion cannot be established, the reservation remains until explicit review; uncertainty does not silently refill the allowance. Quota-denied invoice pages are not opened for extraction, and denied invoice data is excluded from CSVs and sanitized in full reports.

License and account-vault retention

Quota and license records use authenticated AES-256-GCM encryption in a separate local IndexedDB account vault. Its nonextractable encryption key stays in the same browser profile. The saved license key, activation state, verification/check timestamps and known paid-through end support activation and rechecks. The full Gumroad purchase response is not retained; license keys are not included in logs or exported reports. Local initialization markers allow missing or corrupted previously initialized account state to stop exports instead of creating a fresh allowance.

Clear local history deletes invoice run/download tracking, not quota or license records. Explicit account-vault recovery replaces its encrypted records/key, removes the saved Gumroad license key, deactivates Pro and marks the current month’s free allowance as fully used (5/5). Recovery never silently grants fresh credits. Reactivate a valid license for Pro or wait for the next local calendar month for free exports. Removing the extension, clearing its profile data or switching profiles can remove local quota/license evidence; the extension does not maintain an Amazon-account-wide server quota.

Gumroad verification and offline access

Activation and license rechecks send only the supplied license key and public product identifier to https://api.gumroad.com/v2/licenses/verify over HTTPS, with increment_uses_count=false. No Amazon invoice/order data is included. Gumroad separately handles purchase/payment information under its privacy policy.

The extension uses a 24-hour recheck interval. If a verification request fails because the network or service is unavailable, previously verified Pro access can continue for at most seven days from the last successful verification and never past a known membership end. This does not grant grace for an explicitly invalid license response: wrong-product, refunded, disputed, chargeback or ended membership responses revoke Pro. Cancellation with a future paid-through end preserves access until that end. An unverified key does not receive offline Pro access.

Downloaded files and reports

Downloaded PDFs, CSV summary/item files and optional reports are readable files saved through Chrome Downloads. The extension does not encrypt these files. Both CSV files include export scope, period, coverage and run warnings so these notes remain with shared copies. Their location, disk protection, synchronization or backup depends on the user's browser/device/cloud-folder settings.

Clear local history does not delete downloaded files or clear Chrome download history. Chrome's separate browsing/download records and Amazon pages remain subject to their own settings and policies.

A full JSON run report may contain order IDs, invoice links, dates, full descriptions, quantities, prices, totals, seller/product details, actual filenames or paths and run details. Treat it as private purchase data. The separate diagnostics report contains aggregate counts, fixed issue categories, status labels, run type and extension version; it excludes order IDs, URLs, titles, amounts, filenames, paths and download IDs. Reports are saved only when the user requests them and are not transmitted automatically.

Where data goes

The extension processes purchase information locally in Chrome and loads the Amazon pages needed for orders and invoices. It does not send purchase information to an extension-operated server. No purchase information is sent to Gumroad for license verification. Pro activation and subsequent license checks transmit the supplied license key and product identifier to Gumroad over HTTPS. Gumroad handles checkout, payment, renewal/cancellation and its own records under its privacy policy: Gumroad privacy policy. No Amazon password or authentication cookie is transmitted. There is no analytics, advertising, affiliate tracking or remote executable code. The separate encrypted account vault supports the five-document allowance and Pro status as described above.

PDF export uses Chrome's debugger interface to verify and print a supported invoice tab. This is a local Chrome operation. Chrome may show a broad permission warning despite this narrow implemented use.

Limited Use

Order and browser data is used only for the disclosed invoice scanning, PDF/CSV export, recovery and local download-status features. It is not used or transferred for advertising, resale, credit decisions or unrelated profiling. The extension's use of information adheres to the Chrome Web Store User Data Policy's Limited Use restrictions. This statement describes its data-use purposes; it does not certify every store requirement, imply Google approval or imply endorsement.

Publisher information

Myth & Byte provides this extension. Contact support@mythandbyte.com for data-handling questions. Do not include license keys, credentials or private invoice reports. Changes to data practices will be reflected in this notice.