PDFTools processes all files entirely in your browser using pdf-lib and WebAssembly. Files are never uploaded to any server. All reading, editing, and rendering happens locally on your device.
Your documents never leave your computer. We cannot access, view, store, or retrieve any file you process. Once you close the page or download the result, the data is gone from browser memory.
We do not collect, store, or retain user files, and no logs of file content are kept. Operational records are limited to usage and abuse-prevention counters plus the optional account, payment-entitlement, newsletter, and feedback data described below.
Accounts are optional. If you create one, we store your email, optional display name, a salted password hash (never your plaintext password), and revocable session records in Upstash Redis for authentication and Premium recovery. If you voluntarily join the newsletter, Buttondown stores your email for sending tool updates.
Premium subscribers' email addresses and verified subscription-entitlement records are stored in Upstash Redis to restore paid access. Payment data is handled entirely by Lemon Squeezy — we never see or store credit card details.
We do not currently load third-party advertising scripts or use advertising cookies.
We also use Google Analytics (GA4) for anonymous usage analytics (page views, tool usage). This data helps us improve the site. No file content or personal data is sent to analytics.
A client ID (random UUID) is stored in your browser's localStorage to track daily usage limits. This ID contains no directly identifying information. Premium status is also cached in localStorage for fast display. Short-lived abuse and rate-limit counters use a one-way hash of the network address supplied by Vercel; the raw address is not written to our application's Redis keys.
No essential cookies are required for the core PDF tools to function.
Our Chat with PDF, AI OCR, and scanned-table extraction features send extracted text or rendered page images to Google's Gemini API for processing. The original PDF file is never transmitted; only the content needed for the AI request is sent.
AI responses are generated in real-time and not stored. We track anonymous usage counts (questions asked per day) via Upstash Redis to enforce free-tier limits. No conversation history is retained on our servers.
If you submit feedback via our feedback form, your name, role, rating, and comments are stored in Upstash Redis and displayed publicly on the homepage. No email or contact information is collected. You can request removal by emailing us.
You have the right to request deletion of any data associated with your client ID or email. Contact us at saqibbostan83@gmail.com and we will respond within 7 days.
For privacy questions or concerns, email saqibbostan83@gmail.com.
Last updated: September 2026