Privacy Policy

This Privacy Policy explains how PDFflow handles information when users visit pdfflow.org or use its browser-based PDF tools.

PDFflow is an independently operated online service based in Ukraine.

Privacy contact: support@pdfflow.org

1. Local PDF processing

The current PDF tools process selected PDF files locally in the user’s browser.

During normal operation of these tools:

• the contents of selected PDF files are not uploaded to PDFflow’s servers;
• PDFflow does not store copies of selected PDF files;
• resulting PDF files are prepared for download on the user’s device;
• no account is required.

Users should not send confidential PDF files to the support email unless this is necessary and they understand that email is not part of the local-processing workflow.

2. Technical website data

The hosting and network infrastructure may process ordinary technical information needed to deliver and protect the website, such as:

• IP address;
• request date and time;
• requested URL;
• browser and device information;
• response status;
• security and diagnostic data.

The website is hosted using Netlify infrastructure. Netlify may process technical data according to its own privacy and security practices.

PDFflow does not use this technical data to inspect the contents of locally processed PDF files.

3. Support email

Messages sent to support@pdfflow.org are processed through Zoho Mail.

A support message may include:

• sender name;
• email address;
• message content;
• technical details voluntarily supplied by the sender;
• attachments voluntarily included by the sender.

This information is used to:

• answer requests;
• investigate reported problems;
• maintain support correspondence;
• protect the Service against abuse.

Support messages are retained only for as long as reasonably necessary for these purposes, legal obligations, dispute handling, or security. Users may request deletion of support correspondence where applicable.

Do not email sensitive documents, identity documents, financial records, medical records, passwords, or confidential PDFs unless explicitly necessary.

4. Cookies and local browser storage

PDFflow may use strictly necessary browser storage where required for technical operation, preferences, interface state, or security.

PDFflow does not use advertising cookies or analytics cookies. The Plausible analytics described in Section 5 operates without cookies, and the application does not store analytics identifiers in cookies, localStorage, or other browser storage.

If analytics, advertising, affiliate tracking, or other non-essential technologies are introduced later:

• this Privacy Policy will be updated before activation;
• the relevant providers and purposes will be identified;
• consent controls will be introduced where required by applicable law;
• users will be given available choices to accept, reject, or manage non-essential technologies.

5. Analytics

PDFflow uses Plausible Analytics as a privacy-focused analytics provider. Plausible Analytics is operated by Plausible Insights OÜ, a company based in the European Union.

The Plausible script is loaded only on the production website atpdfflow.org. Analytics is used to understand:

• overall website traffic;
• traffic sources;
• popularity of pages and tools;
• steps of the product workflow (opening a tool, selecting a file, starting local processing, successful processing, downloading a result, starting over);
• whether local processing succeeds;
• normalized error categories;
• result downloads.

Product events carry only a fixed, limited set of properties: the tool name (merge, rotate, reorder, delete, or extract); for processing errors, a normalized error category (for example “invalid_pdf” or “file_too_large”); and for downloads from the Extract tool, a download type (“extracted” or “organized”).

Analytics events do not include the contents of PDF files, file names, file sizes, page counts, page numbers, error message text, email addresses, or user identifiers. The application does not set analytics cookies and does not create persistent user identifiers.

Plausible is not used for advertising personalisation.

If the operator connects the Plausible integration with Google Search Console, Plausible additionally displays search metrics (such as impressions, clicks, and search queries) that Google has already collected in its search results. This integration does not add any Google tracking code to the website.

6. Advertising, affiliates, and monetisation

PDFflow does not currently display advertising or use advertising trackers.

PDFflow may later use:

• contextual or personalised advertising;
• affiliate links;
• sponsorships;
• paid tools;
• subscriptions;
• other commercial models.

Before any advertising or tracking technology is enabled, this Policy will be updated with the relevant provider, data categories, purposes, and user choices.

Advertisers and affiliate partners will not receive the contents of PDF files processed locally through PDFflow’s tools.

Affiliate links may allow a partner to recognise that a visit or purchase came from PDFflow. Such links will be disclosed where used.

7. Legal bases and purposes

Where applicable data-protection law requires a legal basis, technical and support information may be processed for:

• providing and securing the Service;
• responding to user requests;
• diagnosing technical problems;
• preventing abuse;
• complying with legal obligations;
• pursuing legitimate interests in operating and improving the Service, provided those interests do not override user rights.

Consent will be used where required for non-essential cookies, advertising, or analytics technologies.

8. Data sharing

Information may be processed by service providers only where necessary to operate the Service, including:

• Netlify for hosting and network delivery;
• Zoho Mail for support email;
• Plausible Insights OÜ for privacy-focused website analytics;
• professional advisers or authorities where legally required.

PDFflow does not sell the contents of user PDF files.

PDFflow does not intentionally disclose the contents of locally processed PDF files to advertisers or analytics providers.

9. International processing

Hosting and email providers may process technical or support information in countries other than the user’s country.

Those providers are responsible for their own infrastructure and contractual safeguards. Users should review the privacy information of relevant providers where needed.

10. Retention

PDFflow does not retain the contents of PDF files processed locally through the browser tools.

Technical logs are retained according to the operational and security settings of the hosting provider.

Support correspondence is retained only for as long as reasonably necessary for support, security, legal, and dispute-handling purposes.

11. Security

PDFflow uses reasonable technical and organisational measures appropriate to a small browser-based service.

No internet service, browser, device, network, or email system can be guaranteed completely secure.

Users remain responsible for protecting their devices, accounts, browser environment, original files, and downloaded results.

12. User rights

Depending on applicable law, users may have rights to:

• request access to personal information;
• request correction;
• request deletion;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request data portability where applicable;
• complain to a competent data-protection authority.

Requests may be sent to: support@pdfflow.org

Identity verification may be required before fulfilling a request.

13. Children

PDFflow is not directed to children who cannot legally consent to use of an online service in their jurisdiction.

PDFflow does not knowingly collect personal information from children through user accounts because the Service currently does not offer accounts.

14. Third-party links

PDFflow may link to external websites or services. Their privacy practices are governed by their own policies.

15. Changes to this Policy

This Policy may be updated when the Service, providers, legal requirements, analytics, advertising, or monetisation practices change.

The updated version will be published with a revised date.

16. Contact

Privacy questions and requests may be sent to:

support@pdfflow.org