Privacy policy

Last updated: 2026.

The short version

The files you load into LoadRecon are read and compared inside your own browser. They are not uploaded, not stored, and not transmitted anywhere.

Advertising is disabled in this deployment, so it does not load advertising scripts or advertising cookies.

We would rather be precise than reassuring, so the rest of this page sets out both halves honestly.

Your files

LoadRecon has no backend. The site is static files served from a CDN; there is no application server, no database, and no account system. When you choose a file, it is read by JavaScript in the browser tab you are looking at, held in memory while you work, and released when you close or reload the page.

The reconciliation tool runs in its own document, embedded in this page as a sandboxed frame. The sandbox is what keeps the two sides genuinely separate: the tool's document is given an opaque origin of its own, so the advertising script running on this page cannot reach into it, read the file you selected, or see anything the tool has parsed. The browser refuses the access outright.

That document is also served with a Content Security Policy that:

• allows scripts only from this site, where the CSV, Excel, and UI libraries are pinned and self-hosted, so no advertising or analytics script can run inside it — by accident or otherwise;
• sets connect-src 'none', which blocks fetches, XHR, WebSockets, EventSource, and beacon connections from that document. The code contains no path that uploads file contents, parsed fields, or reconciliation records.

The only value that crosses the iframe boundary is the tool's rendered height in pixels, so the surrounding page can size the frame. That layout measurement can change as the interface shows more or fewer rows, but it contains no file fields or reconciliation values.

You do not have to take this on trust. Open your browser's developer tools, watch the Network tab, and run a reconciliation.

What we do not collect

No accounts. No email addresses. No load, trip, driver, invoice, or payment data. No file contents or filenames. Nothing from your files is written to a URL, a cookie, or local storage. The current version does not store interface preferences either.

Advertising

Advertising is disabled in this deployment. If advertising is enabled later, the production build requires a publisher ID, all ad-slot IDs, and confirmation that a Google-certified consent platform is configured and Auto Ads is disabled before it will succeed.

Hosting

The site is hosted on Cloudflare Workers. As with any web host, Cloudflare processes connection data such as IP addresses in order to serve the site and protect it from abuse. This is infrastructure-level logging and is not linked to anything you do inside the tool.

Children

This site is aimed at commercial carriers and is not directed at children under 13.

Changes

Material changes to this policy will be reflected in the date at the top of the page.

Contact

No contact address is configured in this development build.