Privacy Policy

The short version

When you merge a PDF, compress an image or convert a spreadsheet here, the file is read by code running in your browser tab. It is not uploaded, not stored, and not seen by us. Close the tab and it is gone. This is not a promise about how carefully we guard your uploads — it is that for most tools there is no upload to guard.

What we actually collect

Files you process

For browser-side tools: nothing. The file never leaves your device. For the small number of tools that need a server — password protection, PDF/A conversion, Office conversion with exact layout, and repair — the file is sent to our document service, converted, returned, and deleted immediately. It is never written to long-term storage and never inspected.

The AI tools

Summarise and Translate send the text of your document through our server to an AI provider (OpenAI) so it can be processed. The provider’s own privacy terms apply to that text, and we do not keep a copy. The extractive summary and every other tool never send your text anywhere.

Short links

The URL shortener stores the address you submit, because storing it is the entire point of the feature. It also records how many times the link was opened. It does not record who opened it. Each address is checked by Google for malware and phishing before the link is created.

Signing in

You only need an account to hold a balance for AI runs; every tool works signed out. Signing in happens through Google, and Google tells us three things: a permanent identifier for your account, your email address, and the name and picture on your Google profile. We store those, your balance, and a list of your own top-ups and charges. We never receive your Google password, and we never ask Google for anything else — no contacts, no files, no Drive. While you are signed in, an encrypted cookie on your device identifies your account; signing out removes it. Deleting your account from the account page erases all of it.

Payments

Checkout happens on Lemon Squeezy, which processes the payment as merchant of record. We never see or store your card details. Lemon Squeezy tells us the amount paid and which account it belongs to, and that amount becomes your balance. Your documents are never part of a payment, and we do not send anything you upload to the payment service.

Support messages

If you use the contact form, we keep your name, email address and message so we can reply, and a copy is emailed to our support mailbox. It is not used for anything else, and we delete it when you ask.

What your browser keeps

Your cookie choice and today’s count of AI runs are kept in your browser’s own local storage, and a paid plan you activate is kept in the cookie described above. They stay on your device. Clearing your browser data removes them.

Server logs

Like any website, our server records requests — the page requested, the time, the browser type, and the IP address making the request. We use this to keep the site running and to rate-limit abuse, and we do not use it to build a profile of you.

Visitor statistics

We use Google Analytics to count visits and see which tools people use, so we know what to improve. It records the pages you open, the site that sent you here, your rough location (country or city) and your type of device and browser. It never receives your files, their names, or anything you type into a tool.

If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics sets no cookies unless you accept them; until then Google only receives a cookieless signal that a page was opened, with nothing linking one visit to the next. Everywhere else it is on unless you reject it. Either way, you can change your cookie choice at any time.

What we never do

• We do not sell your data. There is no data to sell.
• We do not require an account to use the free tools.
• We do not read, index or train on the documents you process.
• We do not add a watermark or an email gate to get your file back.

Your rights

You can ask what we hold about you, ask for it to be deleted, or object to how it is used. Because the browser-side tools keep nothing, in most cases the answer is that we hold nothing. Requests go to the address on the contact page.

If you are in the United States

State privacy laws — California’s CCPA and CPRA, and comparable acts in Colorado, Connecticut, Virginia, Utah and elsewhere — give you the right to know what a business has collected about you, to have it deleted, to correct it, and to opt out of its use for targeted advertising. This site is far below the revenue and headcount thresholds that make those laws binding on it. We answer the requests anyway: ask at the address on the contact page. For most people the honest answer is that we hold nothing, because the tool you used never sent your file anywhere.

We have never sold personal information, and we do not accept money for access to anyone who visits. Nothing on this site is shared with an advertising network, because there are no ads.

Residents of Canada have comparable rights under PIPEDA and Quebec’s Law 25, and we treat those requests the same way.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes in a way that affects what we collect, the date at the top of this page changes with it.