Privacy policy

This policy covers ilovspdfs.vercel.app and the tools on it. It is written to be read rather than to be defensible, so where something is a limitation it is described as one.

16 of the tools on this site process files entirely inside your browser. When you choose a file, it is read into memory in the page and worked on by a background thread on your own machine. No network request carries the file, so we never receive it, never store it, and could not produce it if somebody asked us to.

You do not have to take this on trust. Open a tool, disconnect from the internet, and use it — if it still produces a file, nothing was uploaded. The privacy and security page explains how to watch the network yourself while a job runs.

12 tools — Compress PDF, Protect PDF, Unlock PDF, PDF to Word, Word to PDF, Excel to PDF, PowerPoint to PDF, PDF to Excel, HTML to PDF, OCR PDF, eSign PDF, Repair PDF — run on our servers, because the work cannot be done in a browser tab. They are labelled Secure cloud on the tool page, before you choose a file, and they are part of the Pro subscription. For these, your file is sent over HTTPS, held in memory for the moment of processing, and streamed straight back as the response. It is never written to disk, its name and contents are never logged, and nothing remains on the server once the response has been sent. A password you type for the protect or unlock tools is used once, for that file, and is not kept.

Some further tools are listed but switched off, because they would need software we have not deployed. If one is turned on, its page will say so and this policy will describe it.

Serving a web page means receiving a request, and the hosting provider writes each one to a request log. Those entries contain your IP address, the date and time, the URL requested, the response status, and your browser's user-agent string.

These logs exist to keep the site working — to see that it is up, to diagnose errors, and to recognise abuse such as an attempt to overload it. They are not used to build a profile of you, are not combined with anything else, and are not shared. The hosting provider keeps them for a short period and then discards them.

A log entry records that a page or an endpoint was requested. It does not record what file you chose, what it contained, or what the tool produced: for the browser-local tools because none of that reaches the server, and for the cloud tools because the handler that processes a file logs nothing about it.

One cookie exists, and only once you sign in: it carries a random session token so you stay signed in, and it is deleted when you sign out or after thirty days. The browser also keeps one local flag saying whether you were signed in, so the header does not flicker; it holds no identity. There is no analytics package, no tag manager, no advertising, and no social media widget.

Every font, script, image, and stylesheet on the tool pages is served from this domain, so using a tool never causes your browser to contact another company. The one exception is the pricing page, which loads the checkout script of Paddle, our payment provider, so that a subscription can be bought.

The “Support me” button in the header and footer is an ordinary link to Gumroad, which handles payment. Nothing is loaded from Gumroad unless you click it, and following the link puts you on their site under their privacy policy, not ours. We are not told who clicked or who paid.

An account is needed only for Pro. It consists of your email address and a hash of your password (scrypt, so the password itself is never stored and cannot be recovered from the database). Signing in creates a session record keyed to a hash of the cookie token, so a copy of the database could not be used to sign in as you.

Payment is handled by Paddle, the merchant of record. We never see your card. Paddle tells us the state of your subscription — the plan, whether it is active, and when the paid period ends — and we keep a copy of that so the site can answer “what can this account do” without asking Paddle on every page. Paddle's own privacy policy covers what it holds.

We do not have your documents, their filenames, their contents, or any record that you ran a particular tool on a particular file.

Where the GDPR, the UK GDPR, or a similar law applies to you, you have rights of access to and erasure of your personal data. For an account, that is the email address, the session records, and the subscription state described above; deleting the account removes all of them, and the record that money changed hands is kept only as Paddle requires. Without an account, the only personal data is the request log, keyed to an IP address and a timestamp rather than a person.

To exercise those rights, write to hello@ilovspdfs.com from the address on the account, or with the IP address and the approximate time for a log entry. If a log period has already rotated, the data is gone and we will say so.

The site is not aimed at children. The free tools require no account and ask for no personal information; a Pro subscription requires an adult able to enter into a contract with the payment provider.

If what the site does changes, this page changes with it and the date at the top moves. Any tool that sends your file to a server is labelled on the tool page itself, before you choose a file, not disclosed only here.

Questions about privacy, or a security issue to report, go to hello@ilovspdfs.com. Please report security problems before disclosing them publicly.