Privacy policy

Local files and generated images

Local PDFs selected, dropped or pasted into the converter are read and rendered by PDF.js in your browser. They are not uploaded to our conversion service. Generated images and ZIP archives are also created in the browser. Local files have a 50 MiB limit.

Queue entries and remote URLs are held in page memory, not saved in browser storage by the app. Clear completed results or close the page to release them. Downloads and copied images remain under your device and clipboard settings; browser extensions or other software may access them.

Remote PDFs pass through Cloudflare

When you import a public PDF URL, your browser sends it in a same-origin POST request to /api/pdf/fetch. A Cloudflare Pages function forwards the request through a service binding to a dedicated Cloudflare Worker. These components receive the URL and PDF bytes so they can fetch and validate the document before browser conversion.

The gateway holds at most 25 MiB per download in bounded memory, allows up to 20 seconds and 3 redirects, and returns Cache-Control: no-store. The application does not persist or cache remote documents, log document content, or put full URLs and query parameters in application logs. Cloudflare still handles network metadata, such as IP addresses, to deliver and protect the service; this is not an anonymous network service.

Only public HTTP(S) URLs on standard ports are accepted. Cookies and Authorization headers are not forwarded to the remote host. The host sees the gateway request and the requested URL, including any query parameters. Avoid confidential or signed URLs; do not submit a URL you lack permission to access.

Preferences, analytics and third parties

Theme preference is stored in localStorage. An explicit language choice is stored in localStorage and a first-party Cookie for up to one year. You can clear these in your browser's site-data settings; the next visit uses default or browser preferences.

The converter pages load Google Analytics 4 (GA4) only when the site owner configures a measurement ID. GA4 may use cookies and process page, device and network information for usage measurement under Google's policies. The application does not intentionally send PDF content, filenames or imported URLs as analytics events. This is not a claim that analytics collects no personal data. The static guide and policy pages do not include analytics scripts.

Cloudflare hosts this site and processes requests needed to serve it. Third-party links have their own policies. See Google's privacy policy at https://policies.google.com/privacy and Cloudflare's at https://www.cloudflare.com/privacypolicy/.

Advertising, consent and contact

Google AdSense requests are disabled in this build, even if a publisher ID exists. There is no active advertising cookie or consent manager supplied by this application. Before enabling ads, the owner must configure a genuine account and units, review applicable consent obligations and publish the actual vendors and controls.

If ads are enabled later, Google and other participating vendors may use advertising cookies based on visits to this and other sites to personalize ads. Users can manage personalized advertising through https://myadcenter.google.com/. For personalized ads in the EEA, UK and Switzerland, Google requires a certified CMP integrated with the IAB TCF. A homemade banner is not a certified CMP.

For maintenance and privacy questions, contact [email protected]. The owner must still review these disclosures against the actual deployment and configure the applicable account and consent requirements before enabling advertising.