Privacy and document handling

Files leave your browser for processing

Documents and their filenames are uploaded over HTTPS through the Cloudflare relay to the hosted PDF service. The worker needs access to their contents to perform your selected operation. This is not end-to-end encrypted processing, and the website does not currently offer an offline, browser-only alternative.

Temporary files and deletion

Uploads and results use private, ephemeral backend storage. Files become unavailable when their configured retention expires, at most 24 hours, and may disappear earlier after a service restart. Expired objects are cleaned by the running service; this is not a guarantee of physical deletion at an exact wall-clock moment while the service is asleep. Manual deletion is not offered in this interface; associated files expire automatically.

Browser session information

The interface saves an owner session token and the last job identifier in local storage so the same browser can retrieve its job. Sessions expire within 24 hours. To limit abuse, the application groups requests using a pseudonymous identifier derived from your public IP address; its rate-limit records do not contain the raw IP or document contents. Visitors sharing a public IP share these limits but have separate document ownership. It also stores motion and color-theme preferences. Session tokens are not passwords; clearing browser storage or using a different browser can make an existing job inaccessible. Password fields are cleared after submission attempts and are not saved as browser preferences.

Network activity panel

The panel stores this browser’s observed file and API payload totals, request attempts and up to six recent request labels, including filenames, in local storage. It does not store file contents, passwords, request bodies or signed transfer URLs. Counters and recent labels reset in 24-hour periods while the site is open, or when you next return after a period expires. They are not sent to an analytics service and do not measure all device traffic or reset provider quotas.

Providers and analytics

Cloudflare serves public website files and streams document uploads and downloads over HTTPS through the website address without deliberately caching file contents. Hugging Face runs the processing service. Human-verification widgets and their third-party scripts are not loaded. Hosting providers can handle operational request information under their own policies. The site does not add a third-party analytics script or send document content to an analytics system. This is not a claim that hosting providers keep no logs.

Before uploading

Only upload documents you are authorized to process. If a document is too sensitive for this hosted workflow, use a suitable local workflow instead. Review the output before sharing, keep your original and do not place passwords or confidential files in public support discussions.

Related information