Privacy Policy

The short version

OnlyPDF's PDF tools run in your browser. For those tools, your file is never uploaded to our servers, we don't require an account, and we don't sell personal data. The rest of this page explains that in more detail, plus what happens with things like the blog and the contact form.

Your PDF files

PDF Watermark Remove, PDF to Word, Word to PDF, Compress PDF, Merge PDF, Split PDF, Delete PDF Pages, Extract PDF Pages, Rearrange PDF Pages, Insert PDF Pages, Rotate PDF, JPG to PDF, PNG to PDF, PDF to JPG, PDF to PNG all run in your browser. The PDF file you work with is processed on your own device and is not uploaded to our servers or stored by us. If you close the tab, the file and any changes you made are gone — we never had a copy to begin with.

The only network activity these tools cause is loading the tool's own code (and, for tools with page previews, a small open-source rendering library) — never your document's content.

Tools we add in the future

Some future tools — for example, advanced compression, OCR, or certain file conversions — may require server-side processing to work at all. If that happens, we'll clearly say so on that tool's page before you use it, and this policy will be updated to describe exactly what's processed, how long it's kept (if at all), and when it's deleted.

Accounts

OnlyPDF doesn't require an account to use the PDF tools, so we don't collect a name, email, or password for that purpose. There is no user dashboard and no stored history of files you've processed.

Analytics and cookies

OnlyPDF uses lightweight, privacy-conscious analytics to understand which public pages and tools are useful. We record events such as page views, tool starts, and successful tool completions. The analytics record may include the page path, the referring site's hostname (or the utm_source tag of the link you used), a broad device category, and a country code supplied by our hosting platform. We also use a randomly generated session identifier stored in your browser's session storage (it is cleared when you close the tab) so repeated events from the same browser session can be counted more meaningfully. We do not send the contents, names, or bytes of files you process to analytics. Admin pages are excluded from public page-view tracking. To apply the free daily usage limit of each tool, we also set one strictly necessary cookie (a random device identifier) and count tool uses against it and against a salted, one-way hash of your IP address; the raw IP address is not stored, and counters are deleted after two days. If you create an account to activate a Pro or Lifetime license, we store your email address and your sign-in session (strictly necessary cookies set by our authentication provider, Supabase), the license key you linked together with its status and the email used at purchase, and, for paying customers, a small preference cookie (opdf_ad_free) that hides ads. Payments are processed by Gumroad, which acts as the seller of record and collects your payment details and any applicable taxes under its own privacy policy; we never see your card number. We contact Gumroad's license service to confirm that a license is still valid. Where required (for example in the EEA and the UK), advertising cookies are only used after you consent through Google's consent message, and you can change your choice any time via "Cookie settings" in the footer. We also remember in your browser (local storage) that you have seen or dismissed an announcement, so we do not repeat it.

The contact form and emails

If you email us or use a contact form, we'll use the information you provide (such as your email address and message) only to respond to you and to keep a record of support requests. We won't add you to a marketing list without your separate consent.

To stop spam, the contact form keeps a short-lived counter tied to a one-way hash of your IP address. We don't store the IP address itself, and these counters are deleted automatically after a couple of days.

The blog

Blog pages may use images sourced from providers like Pexels and Pixabay, with attribution where required by their license terms. Reading the blog doesn't require an account, and we don't track individual readers across sessions beyond standard, aggregate analytics.

Advertising

Some pages, mainly blog articles, may show ads served by Google AdSense. Google and its advertising partners may use cookies or similar technologies to show and measure ads and, depending on where you live and the choices you make, to personalize them. We don't place ads inside the file upload or processing controls of the PDF tools, and your PDF files are never shared with advertisers or with Google, because the tools process them in your browser.

Where the law requires it, we ask for your consent before ads that use cookies or personal data are shown. You can manage personalized advertising in Google's Ads Settings, and read how Google uses information from sites that use its services on its partner sites page.

Children's privacy

OnlyPDF is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we'll remove it.

Your rights over your data

Because the PDF tools don't collect or store your files or require an account, there's generally nothing tied to you to access, export, or delete from that side of the site. Depending on where you live, you may still have rights (such as access, correction, or deletion) over any information you've shared with us directly, like a contact form submission. You can exercise those rights by reaching out through the contact page.

International use

OnlyPDF is available to visitors worldwide. Because the core tools process files locally in your browser, no file data crosses borders as part of using them. Any information you submit directly to us (like a support email) may be handled by infrastructure located in different countries than your own.

Changes to this policy

As OnlyPDF adds tools, analytics, or advertising, this policy will be updated to reflect what's actually happening. We'll update the date at the top of this page when that occurs.

Contact

Questions about this policy, or a request related to your data, can be sent through the contact page. See also our Terms of Service.