Last updated: December 4, 2025
Unlike most online services, we take a radically different approach: we don't collect your data.
We do NOT collect, store, or process:
All PDF operations are performed entirely in your web browser using client-side JavaScript technologies:
Step 1: You select a PDF file from your device
Step 2: The file is loaded into your browser's memory (never uploaded)
Step 3: Processing happens locally using pdf-lib and PDF.js
Step 4: The result is generated in your browser
Step 5: You download the processed file directly
Your files never touch our servers because we don't have servers processing your documents.
We don't use third-party analytics, advertising networks, or tracking tools that could compromise your privacy.
The only external resources loaded are:
Our code is open source. You can inspect exactly how we process your documents and verify that we're being truthful about our privacy practices. Check our GitHub repository to review the source code.
Because we don't collect any personal data, we're GDPR-compliant by design. There's nothing to:
Under the California Consumer Privacy Act (CCPA), you have certain rights. However, since we don't collect, sell, or share your personal information, these rights don't apply in practice because we have no data to disclose, delete, or opt-out of.
If we ever change our privacy practices (for example, if we add optional analytics with user consent), we'll update this page with the new policy and the date of the change.
If you have any questions about our privacy policy or practices, please contact us at: privacy@pdftoolkit.com