What to look for in any converter
Does the privacy policy say the file is processed on your device or on a server? How long is it kept, who can see it, and is it used to train models? A promise to delete files is not the same as never receiving them.
Safer habits
Use your bank's own CSV or OFX export when it exists. Crop or redact account numbers and addresses if a tool allows it. Avoid shared or public computers.
How Satr handles it
Satr runs pdf.js in your browser tab; the PDF is not sent anywhere. The site does send an order id, the chosen plan and (for the single-file plan) the file's SHA-256 fingerprint during payment, plus anonymous counter events with only an event name and language. The privacy page lists every call.
Limits
Satr works with text PDFs downloaded from internet or mobile banking. It does not read scans or photos (no OCR), it uses a generic parser with no per-bank templates so you may need to set the column types yourself, and it is not affiliated with any bank. Check the result against your original statement before you use it.
Questions
How can I check that a PDF is not uploaded?
Press F12, open the Network tab, convert a file and look through the requests: none should carry your PDF.
Does Satr keep my statement?
No, it never receives it.
What does the fingerprint reveal?
A SHA-256 hash identifies the file but does not reveal its content. It is sent only for the single-file plan, to bind the unlock to that file.
Is Satr certified or audited?
No. The extractor code is served unminified so you can read it, but there is no third-party audit.