Privacy Policy & Security Pledge
Last updated: August 2026. At PDF Toolkit, user privacy is not an afterthought—it is the core architectural principle of everything we build.
Our 4 Core Privacy Commitments
All uploaded files and converted outputs are scheduled for automatic hard deletion after 60 minutes.
PDF editing, annotations, and reordering execute directly within your browser's WebAssembly engine.
We do not require email addresses, passwords, phone numbers, or credit cards for core utility usage.
We scrub invisible embedded metadata (authorship, timestamps, device logs) from processed outputs.
1. File Uploads and Ephemeral Lifecycle
When you use tools that require server-side conversion (such as Word to PDF or high-fidelity OCR), your file is transmitted over encrypted TLS 1.3 channels directly into an isolated sandbox container. The file exists solely for the duration required to complete the transformation job, after which both input and output files are wiped.
2. Never Sold, Never Shared, Never Indexed
We do not sell, inspect, train AI models on, or index any user documents. Your documents are treated as confidential streams. Our servers maintain only anonymized telemetry (e.g., job duration, success/failure status code, file size) to monitor system health.
3. Local Storage and Cookies
PDF Toolkit uses local browser storage exclusively for saving user UI preferences (such as Light/Dark mode). We do not deploy invasive third-party cross-site tracking cookies.