Privacy policy

Last updated: 6 November 2026

Summary

• Your PDF files are not uploaded. They are read and processed by JavaScript running in your own browser. We do not receive, store or see their contents, file names, metadata or passwords.
• We do not use our own cookies, user accounts or analytics/tracking tools.
• Like every website, our hosting provider receives technical data (such as your IP address) when your browser loads the pages.
• If advertising is shown, Google may process data about your visit. In the EU/EEA, the UK and Switzerland, personalised advertising only happens with your consent, which you can change at any time.

1. Controller

2. Processing of your documents

When you use a tool such as Merge PDF or Split PDF, the files you select are opened by your browser and processed on your device. They are not transmitted to us or to any third party. The results are created on your device and saved through your browser's download function. When you close or leave the page, the data held in the page's memory is released by your browser.

If you enter a password for a protected PDF, it is only used in your browser to open that file. It is not stored and not transmitted.

3. Hosting and server log data

The website is delivered by Amazon Web Services (Amazon S3 and Amazon CloudFront), operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. When your browser requests a page, technically necessary data is processed: IP address, date and time, requested file, HTTP status, transferred data volume, referrer and browser/operating system information.

Purpose: delivering the website securely and reliably, and preventing abuse. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure website). We have not enabled access logs for this website, so we do not keep a record of these requests ourselves.

AWS may process data in countries outside the EU, including the USA. Amazon Web Services, Inc. is certified under the EU-US Data Privacy Framework. The AWS GDPR Data Processing Addendum, which includes the EU Standard Contractual Clauses, applies to our use of AWS.

4. Cookies and local storage

The PDF tools themselves do not set cookies. They use your browser's local storage only if you tick "Remember this signature on this device" when signing: the signature then stays on your device, is not sent to us, and can be removed there at any time. Cookies or similar technologies are only used by the advertising service described below, and only as permitted by your consent choice.

5. Advertising (Google AdSense)

We show advertisements through Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When an ad is loaded, your browser connects to Google's servers. Google may process your IP address, information about your browser and device, and the page you are visiting, and may read or store identifiers on your device (cookies or similar technologies), to deliver, measure and, with your consent, personalise ads.

Before any non-essential information is stored on or read from your device, you are asked for consent through a consent management platform certified by Google (based on the IAB Transparency & Consent Framework). Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. If you decline, Google may show non-personalised or limited ads, or no ads. All tools work in exactly the same way whatever you choose.

You can change or withdraw your consent at any time with effect for the future using the "Privacy settings" link at the bottom of every page. Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information:How Google uses data for advertisingand Google Privacy Policy.

Our tools never pass your files, their contents, file names or passwords to Google or any other advertising service. File contents are processed in a separate background process of your browser (a Web Worker). Like all third-party scripts, the advertising code is loaded into the same web page, which is why ads are only loaded according to your consent choice.

6. Contacting us by email

If you email us, we process your email address and message to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed, unless statutory retention obligations apply. Please do not send us your documents.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the authority responsible for your place of residence or for our registered office.

8. Changes

We update this policy when the website or the services it uses change. The current version is always available on this page.