Privacy policy

The short version

• Your documents are never sent to us. The tools run inside your browser.
• An account is optional. Signed out, we hold nothing about you at all; signed in, we hold an email address, a name and your settings, and never anything about your documents.
• We count page views, and only if you agree to the cookie that does it.
• One page carries ads: the search page shows Google results, with Google's cookies, underneath our own. It is the only place, and only if you agreed. The tools have none.
• If you email us or use the contact form, we obviously have your message. That is the only personal data we deliberately collect.

Your files

This is the part that matters most, so it gets its own section.

Every tool on this site works entirely inside your browser. When you open a PDF or an image with one of them, the file is read from your own device into your browser's memory, changed there, and saved back to your device. It is not transmitted to us, to our hosting provider, or to any third party.

We therefore never see, store, scan, index or process your documents. We do not know their names, sizes, contents or how many pages they have, and none of that is ever included in an analytics event. Nothing here is a promise about retention periods, because there is nothing to retain.

You can confirm this without trusting us. Load a tool, disconnect from the internet, then use it. It still works, because your file was never going anywhere. More on how that works.

What we collect

Two measurement systems run on this site, and they behave differently.

Google Analytics 4. This counts page views and, when a tool finishes a job, which tool it was. That event carries the tool's name and the page's language and nothing else: no file name, size, page count or contents. It sets cookies, so it does not load at all until you agree to it. Decline and the script is never requested. When it does run, Google receives your IP address, your browser and device type, the pages you opened and an anonymous identifier, and may process that outside your country. It never receives anything about a file.

Cloudflare Web Analytics. A page-view counter with no cookies and no cross-site tracking. It records the page opened, the referring site, the country the visit came from, and general device and browser type. It cannot follow you anywhere else, so it runs for everyone.

We do not build profiles, we do not sell data, and we have nothing to sell even if we wanted to.

Cookies

The only cookies this site can set are the Google Analytics ones described above, and only after you say yes. Your answer itself is kept in your browser's local storage, not sent to us, purely so we do not ask again on every page.

You can change your mind whenever you like on the cookie policy page, which also lists each cookie and what it does.

If you contact us

The contact form is handled by Web3Forms, an external form service. When you submit it, your name, email address and message go to Web3Forms, which forwards them to our inbox. Their privacy terms cover that step alongside ours. Nothing else on this site talks to them, and they are only contacted when you press send; opening the page does not reach them.

We keep messages for as long as it takes to deal with them, plus a reasonable period in case you write again about the same thing. Ask us to delete your message and we will.

Advertising

This site is free and advertising is what pays for it. There is one ad-supported thing on it today, and it is worth being precise about where: the search page shows results from Google underneath our own, and those Google results carry ads. That is the whole of it. There are no ads on the home page, on any of the tools, or anywhere else.

The search box itself does not involve Google at all. What it searches is a small index your browser downloads from us, which is why the box can sit at the bottom of every page without any of them contacting anybody. Google enters the picture only when you land on the search page, and only if you accepted cookies. Decline and the panel is never loaded, so Google is never contacted. Google sets its own cookies when it does load and may use them to personalise the ads it shows you; the cookie policy says what we know about them and points at Google's own list and controls, which are the authoritative ones.

What crosses to Google is the words you typed into the search box, and nothing else. Not a file, not a filename, not how many pages it had. The tools never send those anywhere, so there is nothing of the kind for an advertiser to be given. Google is in no better a position to see your documents than we are, which is to say none at all.

If we add display advertising to the rest of the site, this page and the cookie policy will name the networks and their controls before the first ad appears, exactly as they were updated before this one did.

Accounts and any future server-side tool

An account is optional, and most people will never want one. Signed out, the dashboard saves your starred tools and your settings in your own browser's storage, which never reaches us, and Account Settings has a button that wipes the lot. Sign PDF can keep a signature there too, if you press save on it; that stays in the browser you saved it in, is never sent to us, and the same button clears it.

Signing in exists to make those settings follow you between devices, and that is the whole of it. No tool on this site has been put behind a sign-in and none will be. There is no page limit, no watermark on a free tier and nothing to upgrade.

What an account holds, in full: your email address and display name as Google gives them to us, your language, your appearance choice, your cookie answer, the list of tools you have starred, the day you last used your account, and the dates of any emails we have sent you, with whether you unsubscribed. The day you last used your account is the day you opened your dashboard or account settings while signed in; using a tool never touches it, because tool pages do not talk to our server. That is the complete list, and the person who runs PDFsansar can see it for each account on a private admin page. It does not include a history of which tools you used; we deliberately do not record that against anybody, and the database has no column that could. What it counts instead is a plain daily total per tool, with nobody attached to it.

Signing in uses Google. Google is contacted only when you press the sign-in button: never on page load, never from a tool page, and not at all if you do not sign in. We ask it for your email address, your name and your profile picture, and nothing else; it learns that somebody signed in to PDFsansar, and no more than that. The cookie policy lists the three cookies a signed-in session needs.

If you have an account, we send it at most three emails: a welcome note a day or two after you sign up, and a reminder if you have not signed in for six months, then one last one at twelve. That is all, and nothing is ever sent to anybody without an account. Every email has a one-click unsubscribe link, which stops all of them. They contain no tracking pixel and no tracked links, so we do not know whether you opened one. They are delivered by Resend, a US email service that receives your email address, your first name and the words of the email, and nothing else.

Deleting an account is a button on Account Settings. It signs you out everywhere immediately and stops the syncing at once; the record itself is removed 30 days later, and signing in again inside that window cancels it. The 30 days exist so that pressing the button by mistake is survivable, not so that we can keep anything. Nothing new is collected in the meantime.

We may also, one day, offer a tool that genuinely cannot run in a browser (converting a Word document is the usual example), and that would mean sending a file to a server. If that ever happens it will be a separate, clearly marked tool that tells you on its own page, before you choose a file, that your file is transmitted, where it is processed and how quickly it is deleted. It will never be silently switched on inside a tool you already use. Every tool listed on this site today runs entirely in your browser and will continue to.

Hosting and logs

Account data lives in Cloudflare D1, a database in Cloudflare's own network, and is reached only by the small pieces of server code behind the sign-in and settings endpoints. No tool talks to it. No file, filename or page count ever reaches it; those endpoints handle account records and know nothing about documents.

The site is served by Cloudflare Pages. Like any web host, Cloudflare processes the technical details needed to deliver a page and to block attacks, including your IP address and browser details. This happens for every website you visit and is outside our control, though we chose a host that does not require us to hand over anything about you.

Your rights

Depending on where you live, local law may give you rights over personal data held about you: to see it, correct it, delete it, or object to how it is used. ICT For Media respects those rights wherever they apply.

In practice we hold very little. If you have never contacted us and declined analytics, we hold nothing that identifies you, and there is nothing to request. If you have written to us, email hello@pdfsansar.com and we will act on it.

Children

These tools are safe for anyone to use and we collect nothing that would identify a child. We do not knowingly collect personal data from children, and the site is not directed at them.

Changes

If this policy changes we will update the date at the top of the page. Anything that materially affects your privacy, such as introducing advertising, will be described here before it starts rather than after.

Questions about any of this go to hello@pdfsansar.com or through the contact page.