Privacy

Your file is held in memory only for the seconds it takes to process, then discarded when the request ends. It is never written to disk, never copied to another service, and never seen by a person.

The unlocked file is sent straight back to your browser as the response. We do not keep a copy, so there is nothing for us to delete later and nothing to leak.

The password you type for a protected PDF is used once, in memory, to open that file. It is never stored and never written to any log. There is no field in our database that could hold it.

For each file processed we record one row containing:

• the file name
• the file size and page count
• whether it succeeded, and what was removed — a password, restrictions, or nothing
• the time it happened

This serves two purposes: it enforces the limit of 10 files an hour, and if you have an account it is the history you can see and delete. It contains no file content.

You do not have to sign in. To count the hourly limit fairly we need to tell visitors apart, so we take your IP address, combine it with a secret and store only the resulting hash. The hash cannot be turned back into your address, and we do not store the address itself.

Signing in uses Google. We ask Google for the minimum it offers: your email address, your name and your profile picture. We do not request access to Gmail, Drive, Calendar or anything else, and we could not read them if we wanted to.

Your email address identifies your account and is how you get back in if you lose your passkeys. We never send you email — not receipts, not newsletters, not notifications. There is no mail sending in this application at all.

If you add a passkey, we store its public key and a label such as “iPhone”. A public key cannot be used to impersonate you, and your fingerprint or face never leaves your device — it is checked by the device, not by us.

• We do not sell or share your data with anyone.
• We do not use advertising or analytics trackers.
• We do not set cookies except the one that keeps you signed in.
• We do not read, index or analyse the contents of your documents.

You can clear your history at any time from the history page, which deletes those rows permanently. Removing a passkey from your account page deletes its public key. To remove your account entirely, ask and it will be deleted along with everything above.

Guests may unlock files up to 25 MB and 150 pages. With an account that rises to 100 MB and 5,000 pages. Both are limited to 10 files an hour.