Privacy Policy

The short version

Your PDF files never leave your device. The editor runs entirely inside your browser tab — your documents are processed locally and are never uploaded to us or to anyone else. We cannot see your files because they are never sent to us.

We do not require an account, and we do not sell or share your personal data. We use privacy-respecting analytics to understand how the site is used and to fix problems, and — only if you choose to pay to download a file — our payment processor, Stripe, handles your payment. Your document is never part of any of this.

How your files are handled

When you open a PDF, it is read directly from your device into your browser's memory using standard local browser APIs. All editing — changing text, adding annotations, signatures, images, rotating or reordering pages — happens locally on your computer.

When you download, the edited PDF is generated in your browser and saved straight to your device. Your document itself is never transmitted over the network — it is not uploaded to us, to our payment processor, or to anyone else. The only network requests the app makes are to load the website and, if you choose to pay, to start and confirm your payment; none of these carry your file.

Payments

Editing is free. If you choose to pay the one-time fee to download a file, the payment is processed by Stripe. When you check out, Stripe loads its own secure script on the checkout page and receives your payment details directly; we never see or store your card number.

To start and confirm a payment, our site makes a small server-side request to set up the checkout and to verify that it succeeded. These requests carry payment-session information only — never your edited document, which always stays on your device.

Stripe processes your payment information under its own privacy policy. We do not send your document to Stripe or to ourselves at any point in the payment flow.

What is stored on your device

A few small, optional items may be saved in your browser's local storage or IndexedDB — on your device only, never transmitted to us:

Autosave: while you edit, an in-progress copy of your changes may be cached in your browser's IndexedDB so you can recover unsaved work if the tab closes. It is keyed to a fingerprint of your file, stays on your device, and is cleared when you download or decline to restore it.

Saved signature: only if you explicitly tick the "save this signature on this device" box, your drawn or typed signature image is stored in local storage so you can reuse it. It is never uploaded.

Preferences: small flags such as whether you have already seen a feature tour. You can clear all of this at any time by clearing your browser's site data.

Hosting and server logs

The website is hosted on Vercel. Delivering the website itself involves your browser requesting the page's files (HTML, scripts, styles) from our hosting provider. Like virtually all websites, the hosting infrastructure may record standard technical request logs such as IP address, browser type, and the time of the request, solely to serve the page and maintain security. These logs never contain your PDF or its contents.

Analytics

We use Vercel Web Analytics and Vercel Speed Insights for aggregate, anonymous traffic and performance. These are cookieless and do not build a cross-site advertising profile of you.

We also use PostHog for product analytics — to understand how people use the site and where they get stuck (for example, where they leave the checkout). It is served first-party from our own domain and may set a cookie to recognize your session; it does not build a cross-site advertising profile of you.

PostHog can record anonymized session replays of pages other than the editor, to help us fix usability problems. These replays mask ALL text and form-field values, so the content of your document — and anything you type — is never captured. The editor is excluded entirely, and your PDF files are never sent to PostHog.

Cookies and tracking

We do not use advertising cookies or cross-site trackers that profile you across the web. The third-party services we use are limited to the analytics described above (one of which may set a cookie to recognize your session) and Stripe's checkout script, which loads only on the payment page when you choose to pay. Your document is never shared with any third party.

Children's privacy

This service is not directed at children under 13, and we do not knowingly collect personal information from children. We do not collect your documents at all, and we only handle payment information through Stripe if you choose to pay.

Changes to this policy

If this policy changes, we will update the date at the top of this page. Because the core promise — your files stay on your device — is built into how the product works, that promise will not change.

Contact

If you have questions about this policy, you can reach the operator of this site at hello@textinpdf.com.