Privacy
Controller
STURUP INC, document no. P26000024035 (Florida Division of Corporations), Florida, USA · hello@sturup.co. ExtractoListo is a product of STURUP INC. We'll publish our postal address here as soon as it's available; meanwhile, email us at hello@sturup.co.
Your statements
Your PDF is converted in your browser (pdf.js and, for scans, OCR). The file is never uploaded to any server, ours or anyone else's.
In this free version we send nothing about your statement: not the file, not its data, not your email (we don't ask for it). We use no cookies, no browser local storage and no ad tags.
Hosting and technical logs
The site is served by Cloudflare (Cloudflare Pages). Like any web server, Cloudflare receives your IP address and technical data for each request (browser, page requested, time) to deliver the site and protect it from abuse, and keeps them under its own policy. We keep no visit logs of our own.
Cloudflare, our hosting provider, may receive technical error reports that your browser sends when a request to this site fails (for example, a dropped connection or a page that doesn't exist). These reports contain the address of the page and of the previous page, the status code, the error type, the request method and protocol, and loading times; they never include the content of your files or statements, which never leave your device. According to Cloudflare, it uses your IP address only to derive your country, metro area and internet provider, does not store the IP, and uses the reports only to detect network problems. Legal basis: our and Cloudflare's legitimate interest in the security and proper operation of the site (Art. 6(1)(f) GDPR).
Providers
| Provider | Purpose | Safeguard |
|---|---|---|
| Cloudflare, Inc. (EE. UU.) | Hosting, network and protection. | Certified under the EU-U.S. Data Privacy Framework (active); its DPA also includes standard contractual clauses (www.dataprivacyframework.gov/participant/5666, www.cloudflare.com/cloudflare-customer-dpa/). |
Some providers process data in the USA. They do so under the EU-U.S. Data Privacy Framework certification or European Commission-approved standard contractual clauses, depending on the provider (see the providers table).
Your rights
You can request access, rectification, erasure, objection, restriction and portability (GDPR), or exercise your ARCO rights and revoke consent (LFPDPPP, Mexico), by emailing hello@sturup.co from the affected address. We reply within 30 calendar days at most (or sooner, if your country's law sets a shorter deadline).
Version of October 17, 2026.