Nothing to hide. Here is exactly what this app does – and what it doesn't.
Most “free” PDF tools are free until you need the one feature you came for, or they are free because your documents and data are the product. This one is different, and this page explains how, in plain language, so you can check every claim yourself.
Our promise
No upsell. Ever.
No “Upgrade to Pro”, no trial timers, no nag screens, no watermark that disappears if you pay.
No personal details asked
The app never asks for your name, email, phone or anything else. Fields like “name on stamp” are optional, go only into your PDF, and are never stored. (The only exception is people who choose to be thanked: bug reporters and donors can share a name and profile links for our Thanks page, and donors can share an email for an appreciation token.)
No account, no sign-up
There is no login and no account system at all. Open the page and start working.
No paid tier, nothing locked
Every feature is available to everyone, with no file size, page or daily limits. Donating unlocks nothing, because there is nothing to unlock.
Your files never leave your device
Editing, OCR, redaction, compression and encryption all run inside your browser. We have no server that could receive your documents, and nothing is ever uploaded.
No tracking
No analytics, no cookies, no fingerprinting, no tracking pixels, no profiling, no “anonymous usage statistics”.
Ads, if ever: never annoying
We may show a small number of ads in future to cover costs. If we do: no pop-ups, no autoplay, nothing covering your work, nothing inside your documents, no tracking-based targeting, always clearly labelled, and every feature stays free.
No data saved
We keep no database, no logs of what you edit, and no copies. Your browser only remembers what you explicitly allow (listed below), and you can wipe it with one click.
How it works, in one paragraph
When you visit, your browser downloads the editor once, the same way it downloads any web page. From then on, the editor is a program running on your computer. When you open a PDF, it is read from your disk into your browser's memory; when you save, the result is written back to your disk. It's like a calculator app: it can't send your sums anywhere because it was never built to. After the first visit the editor also works offline.
Every network request, listed
This is the complete list of connections the app can make today. There are no others. If this ever changes (for example if ads are added), this list will be updated first.
| What | Where to | When | What is sent |
|---|---|---|---|
| The app itself (HTML, code, styles, fonts, OCR engine, English OCR data) | This website | When you open a page (then cached for offline use) | A normal page request. No document data. |
| Extra OCR language packs (German, Hindi, Japanese…) | cdn.jsdelivr.net (a public open-source CDN) | Only if you choose a non-English OCR language and confirm the download prompt | A request for the language file. No document data. The CDN sees your IP address, like any website. |
| Bug reports | “Send anonymously”: our report relay service, which forwards it to our inbox. “Email from my account”: your own email app. | Only when you click one of those buttons | Only the report text you read and approved: no document, no file name. Sent anonymously it carries no email address or name (unless you add them to be credited). |
| Donation platforms | The platform you pick | Only if you click a donation button (it opens their site in a new tab) | Nothing from us. We strip the referrer, so they can't even see which page you came from. |
Enforced by your browser, not just by our word. The site sends a strict Content-Security-Policy that tells your browser to refuse network connections to anywhere except this site (and the OCR language CDN). Even a bug in our code couldn't upload a file somewhere else.
What your browser stores for this site
- Your light/dark mode choice, if you toggle it.
- Signatures, only if you tick “Remember in this browser” when creating one (off by default).
- An offline copy of the app's own files, so it works without internet. Never your documents.
- Your documents, file names or page contents – never stored.
- Your name, email or any identifier – never asked, never stored.
- Usage history, clicks, “sessions” – never recorded.
Live: what this browser holds for this site right now
- Checking…
Verify it yourself (2 minutes)
- Watch the network. Open your browser's developer tools (F12 or Cmd ⌥ I) → Network tab. Open a PDF, edit it and save. You will see no request carrying your file.
- Pull the plug. Load the editor, then turn off Wi-Fi or enable airplane mode. Open, edit, sign, redact and save a PDF: everything still works, because nothing needs our server.
- Check the policy. In developer tools → Network, click the page request and look for the
Content-Security-Policyheader (or the meta tag in the page source). - Look for trackers. Use any tracker blocker (uBlock Origin, Privacy Badger, Ghostery). It will find nothing to block.
- Read the code. The complete source code is public, so anyone can audit it.
What we can't promise (honestly)
- Your own device. Browser extensions, malware or a managed work computer can see anything on your screen. We can't protect against those.
- Standard web-server logs. Like every website, the server delivering the app may record basic request data (IP address, time, which file was requested) for security and abuse prevention. We add no analytics on top, and these logs never contain your documents because documents are never sent.
- What you put in your PDF. Text, stamps, signatures and document properties you add become part of the file you share. Use “Remove metadata” when saving if that matters.
- Other services. The OCR language CDN (jsDelivr), the service that relays anonymous bug reports, and any other website you open from a link here each have their own privacy policies. Like any website, they can see your IP address when you connect to them.
How this is funded
Today, by voluntary donations. In future we may also show a small number of ads. If we do, they will follow the “never annoying” rules above and will be announced on this page before they appear, and the ad provider will be added to the “Every network request, listed” table above first, so you always know what connects where. There are no investors to repay, no data deals and no “enterprise edition” holding features back.
Changes to this promise
If anything on this page ever changes, the change and its date will be shown right here, before it takes effect. Last updated: 25 September 2026.
Found a problem or an inaccuracy on this page? Report it here.