Skip to content

Privacy policy

Short version: most tools never upload your files. The ones that do delete them automatically. We don’t sell data or build profiles. If ads are shown, they are labelled and never see your files.

Last updated: 2026-10-01

1. Tools that run on your device

80 tools process files entirely inside your browser using JavaScript and WebAssembly. Your file is not uploaded to us. These pages show the badge “Processed on your device”. Examples: Merge PDF, Split PDF, Extract Pages, Delete Pages, Rearrange Pages, Rotate PDF, Crop PDF, Resize PDF Pages.

2. Tools that use our servers

43 tools need software that can’t run in a browser (for example Ghostscript, LibreOffice or Tesseract). They show the badge “Secure temporary processing”. When you use one:

  • Your file is sent over an encrypted HTTPS connection.
  • It is stored under a random identifier in a temporary directory that only the processing job can use, and processed in an isolated worker.
  • The original upload and all intermediate files are deleted as soon as processing ends.
  • The result is kept only so you can download it, and is deleted automatically within 30 minutes (the configured maximum is 60 minutes). You can delete it immediately with “Delete now”.
  • Downloads require a secret token that only your browser receives. We never publish or list files.
  • We don’t look at, copy, sell or share your files, and we never use them to train AI models.
  • Passwords you enter (for example in Protect or Unlock PDF) are used only for that job and are removed from job records when processing starts. They are never logged.

Scan to PDF builds your PDF on your device; only if you switch on OCR is the finished PDF sent to the server as described above. Text to PDF uses the server only for scripts that need complex shaping (such as Hindi, Arabic or Chinese), and tells you before doing so.

3. What we store in your browser

We don’t use tracking cookies. We use your browser’s local storage only for conveniences that stay on your device: your theme choice, favourite and recently used tools (tool names only, never files), and — only if you tick “Remember on this device” — your saved signature. A file you pass from one tool to the next with “Continue with…” is kept in your browser’s IndexedDB for at most 15 minutes. You can clear all of this in your browser settings.

4. Logs and abuse protection

Our servers log technical information needed to run the service: request type, path (without query parameters or tokens), status code and processing time. To enforce fair-use limits, your IP address is turned into a one-way hash with a key that changes every day; the raw IP address is not stored in our application logs or job records. Your hosting provider or reverse proxy may keep standard access logs under its own policy.

5. Analytics

Analytics are disabled on this deployment. When enabled, we count anonymous events only: which tool was opened, completed or failed, how long processing took and a coarse file-size bucket (e.g. “1–5 MB”). No file names, contents, extracted text, identifiers or cookies are involved.

6. Third parties

Pages load fonts and code from our own server — no third-party analytics or social widgets. If malware scanning is enabled by the operator, uploaded files are checked by a ClamAV service running inside the same infrastructure. URL to PDF visits the public web address you enter on your behalf.

Advertising and video. To cover running costs, the operator may show advertisements and an embedded YouTube video. Ads are always labelled and are never placed inside your files. Ad code from networks runs in an isolated frame that cannot read this page, your files or the data we keep in your browser. When an ad or the video loads, the ad network (for example Google AdSense) or YouTube receives your IP address and browser details and may set cookies, under their own privacy policies. Videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com), start muted, and on data-saver or very slow connections wait until you tap play. Ad blockers don’t affect any tool.

7. Donations

Donations are handled by the payment provider you choose (for example your UPI app). We don’t receive or store your card or bank details.

8. Your choices

You can use every tool without an account. You can delete server results immediately after downloading. For privacy questions, contact us.

This policy describes how the software in this project works. Operators who deploy it should have it reviewed by a qualified professional for their jurisdiction.