Privacy Policy

The short version

PDF Toolkit converts files directly on our own server. There is no account, no email requirement and no profile of you.

The file you upload is deleted the moment the conversion finishes. The result is deleted within 24 hours, or immediately if you press delete.

What we process

Only what the operation needs: the file you choose to upload, the operation you select, and its settings (for example the OCR language or the watermark text).

Like every web server we also see standard technical data in our logs: IP address, browser user agent, requested URL and timestamp. We keep these briefly to block abuse and to keep the service online.

We never ask for your name, address, payment details or account credentials, and we do not want them.

Where your files are processed

Conversion runs on the same machine that receives the upload, using open-source libraries: PyMuPDF for PDF work, Tesseract for OCR. Your document is not sent to any third-party conversion service, cloud OCR or AI provider.

The uploaded original is removed as soon as processing ends, before you even see the download link.

The converted result stays on disk for up to 24 hours so that you can download it. A cleanup job then removes it automatically. The delete button removes it at once.

Cookies

We set no analytics, advertising or preference cookies, and the site embeds no third-party tracking scripts.

Our CDN, Cloudflare, may set a security cookie such as __cf_bm to tell browsers apart from bots. It is needed for the site to work and expires on its own.

The site currently displays no advertising. If advertising is added later, for example Google AdSense, this page will be updated first and consent will be requested where the law requires it.

Sharing

We do not sell, rent or share your files, and no human reads them.

The only third party involved is Cloudflare, which carries the traffic and terminates TLS. Because Cloudflare operates a global network, a request may be handled in a country other than yours.

Your rights

Under the GDPR and comparable laws you may ask what personal data we hold about you, ask for a copy, ask for correction, or ask for erasure.

In practice the only personal data we hold is short-lived log data, and we cannot link an anonymous conversion back to a person. Write to [email protected] and we will do what is possible.

Children

The service is not directed at children under 13, or under 16 where local law sets that threshold, and we do not knowingly process their data.

Security

Traffic is encrypted with TLS from your browser to Cloudflare and from Cloudflare to our server.

The conversion service runs in an isolated process with a memory cap and cannot list or open files belonging to anyone else.

Changes to this policy

If anything here changes, the date at the top of this page changes with it. Material changes will be visible for at least 30 days before they take effect.

Contact

Questions about privacy: [email protected]