Skip to main content
đź”’ Privacy-First Architecture

Privacy Policy

Last Updated: September 2026

1. Core Privacy Principle: Zero Document Uploads for Local Tools

PDFZento is engineered from the ground up to protect your document privacy. Standard PDF operations—including merge, split, compress, edit, rotate, organize, annotate, flatten, and format conversion—execute 100% locally inside your web browser using WebAssembly and Web Workers.

For local PDF tools, document files and extracted document content are processed in your browser and are not uploaded to PDFZento servers or third-party processing services. Your files remain on your device.

2. Distinction Between Local Tools & Server-Assisted Features

Local PDF Operations (Default)

  • Executed entirely in browser WebAssembly memory on your device.
  • Active application memory references are released when you close or reset the browser tab. Browser, operating-system, crash-recovery, caching, download, and other device-level behavior may be outside PDFZento's control.
  • No document content logging, no cross-site user tracking, and no server document caching for local tools.

Server-Assisted Capabilities (Optional / Future)

  • PDFZento may introduce optional server-assisted features in the future. If such a feature is used, the feature interface will identify that server-side processing is required and the applicable data handling will be described at that time.
  • Where a future server-assisted feature temporarily processes data, the applicable feature documentation and privacy notice will describe the processing and retention period.
  • Data transmitted for any server-assisted feature will be encrypted in transit (TLS 1.3).

3. Information We Collect

We believe in minimal data collection:

  • Pseudonymous Abuse-Prevention Identifier: An opaque 128-bit pseudonymous device identifier (stored and verified using an HMAC-SHA256 hash) is used solely to evaluate network risk and prevent abuse of free daily operational quotas. We do not link this identifier to personal identities for unauthenticated users, and we do not use invasive browser fingerprinting (no canvas, WebGL, font, or audio scraping).
  • Account Data (Registered Users Only): If you choose to create an account, we store your email address and cryptographic password hash. We never sell account information.
  • Aggregated Operational Telemetry: Operational and funnel performance metrics (e.g., tool started, tool completed, operation duration, error codes) without document contents, filenames, or personal identifiers.

4. Data Retention & Erasure

Because local document files do not leave your device, PDFZento does not hold copies of those documents to delete. Where an optional or future server-assisted feature temporarily processes data, temporary processing artifacts will be retained only as described for that feature and purged accordingly. Distinct operational data—including pseudonymous abuse tokens, network security logs, aggregated telemetry, and registered account credentials—are retained only as necessary for platform security, abuse mitigation, and account maintenance. Account holders may request deletion of their account and associated profile data at any time from their account dashboard or by contacting our privacy team.

5. Functional Browser Storage

PDFZento uses browser-side storage (such as localStorage, sessionStorage, or equivalent browser mechanisms) strictly for functional and operational purposes, including:

  • Remembering functional user preferences and regional settings.
  • Maintaining pseudonymous quota counters and anti-abuse tokens to enforce free daily limits.
  • Supporting active session state for registered account holders.

This browser storage operates locally on your device, does not store copies of your PDF documents, and is strictly distinct from document uploads. You may clear your browser storage at any time through your browser settings.

6. Free-Tier Advertising

The free tier may be supported by advertising. The availability, format, and placement of advertisements may change over time, and paid plans may provide different advertising treatment as described at the time of purchase. If advertising services are utilized, third-party advertising partners may process technical or contextual device information in accordance with their respective privacy policies and applicable legal standards.

Advertising services operate completely independently of document processing. Local PDF document files, extracted text, and document contents are never provided to advertising providers through local PDF processing.

7. Future Payment Processing

Core PDF tools on PDFZento are currently available without charge. When paid services are introduced, PDFZento may use Lemon Squeezy as a third-party payment provider. Payment and billing information required to complete a purchase may be processed by Lemon Squeezy in accordance with its applicable privacy policy and terms. PDFZento does not receive or store full payment-card numbers or sensitive payment credentials when transactions are handled by the payment provider.

8. Third-Party Infrastructure

PDFZento utilizes Cloudflare for web hosting delivery, edge routing, Content Delivery Network (CDN) caching of static website assets, and distributed denial-of-service (DDoS) mitigation. Cloudflare processes standard network transmission data (such as IP addresses and HTTP request headers) solely to route web requests securely and protect our infrastructure from malicious traffic. Cloudflare does not receive or process document contents from local PDF processing.

9. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights relating to your personal information, including rights to access, correct, delete, restrict or object to certain processing, and in some circumstances obtain a portable copy of your information, where applicable under law.

You may contact us at [email protected] to exercise any applicable rights. Additional procedures or requirements may apply under the laws of your jurisdiction.

10. Data Controller & Contact Information

Data Controller Notice: PDFZento is operated by [DATA CONTROLLER LEGAL ENTITY NAME], having its registered business address at [REGISTERED OFFICE ADDRESS], [JURISDICTION].

For any privacy inquiries, data rights requests, or questions regarding our data practices, please contact our privacy team at [email protected] or visit our Contact Page.