Privacy Policy.

This Privacy Policy explains how PDFSamurai (“we”, “us”, “our”) handles personal information in connection with the website at pdfsamurai.co.uk and the tools accessible through it. It applies to visitors anywhere in the world, with specific commitments to users in the United Kingdom and European Economic Area under the UK GDPR and EU GDPR.

We have written this policy in plain English. If anything is unclear you can contact our Data Protection contact at privacy@pdfsamurai.co.uk.

1. The short version

Our PDF tools are designed so that the documents you process never leave your device. Files are read inside your browser tab using JavaScript and WebAssembly, the operations run locally, and the results are offered as downloads. We do not see, store, copy, scan, or transmit the contents of your documents.

2. Information we do and do not collect

2.1 Document contents — never collected

The files you load into any tool on this site are processed entirely within your browser. They are never uploaded to a server we operate. We do not have, and could not produce, copies of your documents.

2.2 Standard request data — temporarily collected

Like every website, our content is delivered by a hosting provider (Cloudflare Pages) which automatically logs technical request data: IP address, user-agent string, referrer, requested URL, response code, response size and timestamp. This data is generated by the TCP/IP request itself and is necessary for the site to function. Cloudflare retains these logs for the period set out in its own privacy policy.

2.3 Analytics — privacy-respecting

We may use a privacy-respecting analytics solution that does not set cookies and does not collect personal data — for example Cloudflare Web Analytics or a similar provider. This produces aggregate statistics (page views per URL, country-level visitor counts, device-class breakdowns) and is incapable of identifying you.

2.4 Advertising — only with consent

Where we display advertising, served by Google AdSense or a comparable network, that advertising relies on cookies and similar technologies. We only set those cookies after you have given explicit consent through the cookie banner. Refusing advertising cookies does not affect your ability to use the tools on this site.

2.5 Communications

If you email us, fill in a contact form, or join a waitlist for a forthcoming tool, we will hold the information you provide (typically your email address and the content of your message) for as long as needed to respond and a reasonable period afterwards for legal record-keeping. We do not use these addresses for marketing.

3. Legal bases for processing (UK / EEA users)

Where the UK GDPR or EU GDPR applies, we rely on:

• Legitimate interests — for the secure operation, monitoring and improvement of the website, including reading standard request logs from our hosting provider.
• Consent — for any non-essential cookies, including advertising and any analytics that go beyond fully-aggregated data. Consent can be withdrawn at any time through the cookie banner.
• Contract / pre-contract — for handling communications you initiate (e.g. support requests, waitlist sign-ups).
• Legal obligation — where we are required to retain certain information, for example to comply with tax law.

4. Who we share data with

We share only what is necessary, and only with the following:

• Cloudflare, Inc. — our hosting and CDN provider. Receives standard request logs; cannot see document contents.
• Google LLC — where advertising is served via AdSense and you have consented, Google processes the data described in its own Privacy Policy.
• Email provider — the SMTP provider that delivers mail you send to us. Receives the contents of those emails.

We never sell personal data. We never share document contents because we never possess them.

5. International transfers

Our service providers may process data outside the UK and EEA. Where this happens, we rely on the UK International Data Transfer Addendum, Standard Contractual Clauses, or an applicable adequacy decision to protect your rights.

6. Retention

We retain only what is described in section 2: hosting request logs according to the hosting provider's retention policy, contact emails for as long as reasonably needed, and waitlist email addresses until the tool launches or you ask us to remove you.

7. Your rights

Under the UK GDPR, the EU GDPR, the CCPA and other applicable laws, you have the right to access, correct, erase, restrict, or object to the processing of your personal data; to data portability; and to withdraw consent. You can exercise these rights by contacting privacy@pdfsamurai.co.uk.

Because the contents of your documents are never sent to us, we cannot retrieve or delete them on your behalf — they only exist on the device you used.

UK users can also lodge a complaint with the Information Commissioner's Office (ico.org.uk). EEA users can complain to their national supervisory authority.

8. Children

PDFSamurai is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, please contact us so we can remove it.

9. Changes to this policy

We will post material changes to this page and update the “Last updated” date at the top. For substantial changes affecting previously collected data we will, where practical, give additional notice.

10. Contact

For any data-protection question, write to privacy@pdfsamurai.co.uk or post to the address on our contact page.