# Privacy

> Exact statements — not slogans. Your documents are processed in your browser; we do not operate a PDF upload API.

Canonical: https://mypdf.space/privacy
Last updated: 2026-10-26

## Where processing happens

All 67 tools run in your browser using client-side libraries (pdf-lib, PDF.js, Tesseract WASM for OCR, and similar). When you merge, compress, redact, or convert, the bytes are read and written on your machine. See [How it works](https://mypdf.space/how-it-works) and [Security methodology](https://mypdf.space/security-methodology).

## What we never collect

- PDF contents, converted outputs, or extracted text
- Filenames from tools, or document metadata from your files
- Passwords you type into Encrypt / Unlock
- Accounts, emails, or phone numbers required to use the tools
- Advertising profiles built from your documents

Data retention for documents: none on our side — files are not sent to us, so we cannot retain them.

## What we may collect

Anonymous usage analytics to understand which pages help people. Events never include PDF bytes, passwords, or filenames. You can block analytics with browser extensions; tools still work.

- **Google Analytics** — page views and coarse privacy-tool events (starts/completes/downloads)
- **Microsoft Clarity** — session insights (masked where we configure it; never your file contents)
- **DataFast** — product analytics script on pages

## Other third parties

- **Fonts** — Geist via next/font (Google Fonts pipeline at build / CDN as configured by Next.js)
- **OCR language packs** — Tesseract traineddata may download from a public CDN on first use of a language (that is the pack, not your PDF)
- **Hosting / CDN** — the website static assets and HTML are served by our host; that is not your document upload
- **Tips** — Buy Me a Coffee if you open the tip jar (their privacy policy applies to that checkout)

## Cookies and advertising

Analytics vendors may set cookies or similar storage. We do not require an account cookie to use tools. If ads are shown in future, they will not be based on reading your PDF contents (we never receive those contents).

## Verify it yourself (Network tab)

1. Open DevTools → Network (filter: Fetch/XHR).
2. Run [Auto-redact PII](https://mypdf.space/auto-redact-pii) or [Confidential Send](https://mypdf.space/confidential-send) on a sample PDF.
3. You should not see multipart uploads of your PDF to our servers. Heavy work stays in Web Workers / WASM on your device.
4. After install (PWA), many tools keep working offline.

## Contact and bugs

Privacy questions and bug reports: sumitcodes.workspace@gmail.com. Also see the [changelog](https://mypdf.space/changelog).

## Related

- [How it works](https://mypdf.space/how-it-works)
- [Security methodology](https://mypdf.space/security-methodology)
- [About](https://mypdf.space/about)