Privacy policy

The short version

• Most tools never upload your file. The work happens inside your browser tab.
• The tools that do need a server delete the file as soon as the job finishes, in the same request.
• There are no accounts, no tracking cookies and no advertising or analytics profiles.
• The only thing we ever keep is what you voluntarily type into the contact form.

Tools that run in your browser

Merge PDF, Split PDF, Organize PDF, Rotate PDF and Page numbers are implemented entirely in client-side JavaScript. When you drop a file into one of them, the file is read into your browser's memory, transformed there, and handed back to you as a download. It is never sent to us and it never crosses the network. You can confirm that in your browser's network inspector, or by disconnecting from the internet once the page has loaded — the tool still works.

Tools that use the server

Compress PDF, PDF to JPG, PDF to Word, PDF to Markdown, OCR PDF, Protect PDF and Unlock PDF need document tooling that cannot run in a browser tab. For these the file is uploaded over HTTPS to our own server — not a third party — written to a temporary working directory, processed, returned to you and deleted before the request completes. Nothing is copied elsewhere, backed up or retained. Files are capped at 50 MB each.

Passwords you enter for Protect PDF or Unlock PDF are used for that single operation only. They are never written to disk and never logged.

PDF to JPG is the mixed case: rendering pages to images happens in your browser, while extracting the images already embedded in a PDF uses the server, on the same terms as the tools above.

The contact form

If you write to us through the contact page, the name, email address and message you type are forwarded to our own automation service and delivered to us as an email, so that we can read the message and reply. That information is used for nothing else, and you are not added to any mailing list.

To stop the form being used for spam, submissions are rate limited per IP address. That check keeps a short-lived counter keyed to your IP in a hosted Redis instance; the counter expires on its own and is not tied to anything else about you. The form also carries a hidden field that only automated scripts fill in.

Cookies and analytics

PDFKit sets no tracking cookies and loads no analytics or advertising scripts. Your light or dark theme preference is kept in your browser's own local storage so the site does not flash the wrong theme on your next visit; that value stays on your device and is never sent to us.

Like any web server, ours writes ordinary request logs — timestamp, IP address, requested path, response status — which exist to diagnose faults and are rotated out in the normal course of operation. They contain no document contents.

Your rights

Because there are no accounts and no stored documents, there is generally no personal data of yours for us to show you, correct or erase. The exception is a message you have sent through the contact form — ask us and we will delete it.

Changes to this policy

If how PDFKit handles files ever changes, this page changes with it and the date above is updated. Questions about any of it are a perfectly good reason to use the contact form.