Privacy policy
Your documents never leave your device.
Last updated:
The short version
- Your PDFs and images are processed in your browser. We never receive, see, or store them.
- You do not need an account, and we do not sell personal information.
- Like most websites, we use analytics and a hosting provider that see basic visit data such as your IP address and browser type.
- If you choose to contact us or import from Google Drive or Dropbox, those services handle the data needed to do that.
1. Who we are
This policy applies to Online PDF Editor at online-pdfeditor.com, including its localized pages and installable app ("we", "us", "the service"). It explains what information is handled when you use the site and the choices you have.
2. Your files
All PDF and image tools run locally using JavaScript and WebAssembly in your browser. When you select a file, it is read into your device's memory, processed there, and returned to you as a download.
- We do not operate a file-upload endpoint, and no tool transmits your document, its text, its file name, or its metadata to us.
- Passwords you enter to protect or unlock a PDF, signatures you draw, and text recognized by OCR stay in your browser.
- Working copies are held in memory only and are discarded when you reset the tool, close the tab, or leave the page.
- OCR language data is downloaded from our own site; your pages are not sent anywhere to be recognized.
3. Information we collect
Analytics
We use Google Analytics to understand how the site is used — for example, which tools are popular and which pages people arrive from. Google Analytics uses cookies and similar technologies to collect information such as pages visited, referring site, approximate location (derived from IP address), device and browser type, and interaction events. It does not receive the contents or names of files you process. Google's use of this data is described in How Google uses information from sites that use its services.
Hosting and security logs
The site is served by Cloudflare. To deliver pages and protect against abuse, Cloudflare processes standard request data such as IP address, user agent, requested URL, and timestamps. See Cloudflare's privacy policy.
Contact form
If you send us a message, the name, email address, and message you provide are delivered to us through Web3Forms, a form-delivery service. We use this information only to reply to you and to improve the service, and we keep it no longer than needed for that purpose. Please do not include sensitive documents or personal data you do not want to share.
Cloud imports (optional)
If you choose to import a file from Google Drive or Dropbox, you sign in with that provider in a window it controls and grant read access to the file you pick. The file is downloaded straight from the provider to your browser. Access tokens are kept in browser memory for the session and are not sent to us. Your use of these services is governed by the Google Privacy Policy and Dropbox Privacy Policy.
4. Cookies and local storage
- Analytics cookies set by Google Analytics (such as
_ga) to distinguish visits. - Theme preference stored in your browser's local storage so light or dark mode is remembered.
- Offline cache created by our service worker. It stores the site's code, styles, and OCR data so tools load faster and work offline. It never stores your documents.
You can clear cookies and site data at any time in your browser settings, and you can block analytics with a content blocker or the Google Analytics opt-out add-on. The tools keep working either way.
5. How we use information
We use the limited information described above to operate and secure the website, measure and improve the tools, fix bugs, and respond to messages. We do not sell or rent personal information, we do not use it for targeted advertising, and we never combine it with your documents — we never have them.
6. Legal bases (EEA and UK visitors)
Where the GDPR or UK GDPR applies, we rely on our legitimate interest in running and securing a reliable website for hosting logs, on your consent or our legitimate interest in understanding site usage for analytics (depending on your location), and on your request when you send us a message.
7. Data retention
Documents are never retained because they are never received. Analytics data is kept according to our Google Analytics retention settings, hosting logs according to Cloudflare's standard practices, and contact messages only as long as needed to handle your request.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or object to the processing of personal information about you, to withdraw consent, and to complain to your local data protection authority. Because we hold very little information that identifies you, the most effective controls are usually the browser settings described above. For any request, contact us and we will respond within the time required by applicable law.
9. Security
The site is served only over HTTPS. Keeping documents on your device removes the largest risk of an online PDF service — a server holding copies of your files. You remain responsible for the security of your own device and for files after you download them.
10. Children
The service is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.
11. Changes to this policy
We may update this policy as the service changes. The "Last updated" date above shows when it was last revised, and material changes will be highlighted on this page.
12. Contact
Questions about privacy? Use our contact page. See also our terms and conditions.