Free use
Free calculations and individual file checks run in your browser. Your financial inputs are not sent to Rekenbox during these checks. Preferences and inputs remain in memory while you use the app.
EORI, suppliers and extended bulk checks
Single EORI and supplier checks pass through our server after your instruction. VAT and EORI numbers are sent to the European Commission; IBANs are checked for format and checksum. Bulk imports are first read on your device. After starting, we receive selected input or UBL files for processing. Source files are not retained; results and identifiers are kept encrypted for 24 hours for retries without duplicate charges. A local copy of the import and progress stays available in IndexedDB for up to 24 hours. Clear the import or sign out to remove it. A closed page does not process further bulk rows.
Monthly VAT monitoring
After your explicit instruction, we keep your list encrypted and periodically check the numbers with VIES. The current round and up to 12 previous rounds remain with the monitoring. Changes appear in your account; this feature sends no emails. Pausing stops new checks but preserves history. Deleting removes the list and history. Deleting all Rekenbox product data also stops and deletes monitoring. Spent credits are not restored.
Lists of VAT numbers
Pasted lists and CSV files for bulk checks are parsed in your browser. Only selected VAT numbers are sent to VIES after you start. The list, progress and results are temporarily held in this tab’s sessionStorage to support sign-in, payment and resuming. After 23 hours, a stored session is cleared when opened or started and can no longer be resumed. Clear the list, sign out or delete product data to remove this local copy. Browser session restore may restore a tab. Checks never resume automatically; a closed page does not process further numbers.
VAT number checks with VIES
Only after you click do we send the VAT number through our server to VIES, the European Commission service. The check is intended for your customer or supplier. To allow retries without duplicate charges, we keep a completed result encrypted for 24 hours, with a request ID and protected fingerprint. We do not include the number or result in request logs. For the free allowance we keep a pseudonymous IP code and daily counters, which are cleaned up after the short verification period. Purchases and spent credits remain linked to your account; deleting data does not refill your balance. VIES processes the request under its own privacy notice.
Sign-in, email and purchases
We use your email and secure sessions to retrieve your reports. Sign in with a single-use email link valid for 15 minutes. Winstwaker’s mail service processes sign-in and report emails; after payment, we send the PDF to your verified address. Large PDFs are delivered through a download link requiring sign-in. A name from an existing Winstwaker login may remain available. Stripe processes payments, billing data and payment methods. If you buy a report without an account, the purchase belongs to this browser until you link your email; Stripe asks for your email for the receipt. Your payment data is not used to analyse your financial calculations.
Reports and retention
When you prepare a report or save a calculation, we store inputs and results encrypted. Guest reports expire after 30 days. Account and team reports remain until you delete them. Sharing links expire after 30 days and invitations after seven days. Bulk files are processed temporarily and are not saved automatically.
Cookies and measurement
Rekenbox uses necessary cookies for guest access, sign-in and security. We count tool opens, starts, results, error categories, affected field names, time-to-result buckets and downloads per tool and day, grouped by language, usage mode and small or large screen layout. You can optionally say whether a tool helped and select a fixed improvement reason. These measurements do not contain input values, documents, full error messages or visitor profiles. We retain daily totals for 180 days and random delivery codes preventing duplicate counts for 24 hours. Rekenbox contains no advertising pixels. Technical logs and temporary request limits help keep the service reliable.
Sharing and deletion
Anyone with a client link you create can view that report. You can revoke links, export data and delete product data in Settings. Billing invoices and legally required records are retained. Copies of reports already emailed remain in the recipient’s mailbox until they delete them. Deleted data may remain temporarily in backups until those are replaced under the recovery procedure.
Privacy contact
Winstwaker provides Rekenbox. For access, correction or deletion requests, email [email protected]. State that your request concerns Rekenbox.