Privacy by architecture
Your PDFs never leave your device
Privacy is not a policy here – it is how the software is built. There is no server to upload to, no account to create, and your documents are never recorded.
- 0
- bytes uploaded
- 0
- accounts or cookies
- 0
- documents recorded
- 100%
- runs in your browser
How it works
Four layers that keep your files private
No backend
The app is static files. Rendering, editing, OCR, compression, encryption and export all run in your browser.
Enforced by the browser
In the editor a strict Content-Security-Policy allows network connections only to this site, blocks eval and object embeds.
Self-hosted engines
The PDF engine, OCR and AI models are served with the app – no third-party CDN ever sees you or your files.
Safe imports
File types are detected from content, HTML is sanitised and PDF JavaScript is never executed.
Transparency
What is stored, and where
| Data | Where it lives | Leaves your device? |
|---|---|---|
| Your PDFs and edits (autosaved projects) | Browser IndexedDB | No |
| Saved signatures and custom fonts | Browser IndexedDB | No |
| Theme, layout, shortcuts, settings | Browser localStorage | No |
| App files for offline use | Browser cache (service worker) | No – only the app’s own code |
| Passwords you type | Memory only, for one operation | No |
You are in control
Security features you control
AES-256 encryption
Password-protect PDFs with owner and user passwords.
Open toolPermanent redaction
Remove content by area, search or patterns like Aadhaar and PAN.
Open toolMetadata control
View, edit or strip author, title and hidden XMP data.
Open toolPrivacy risk scan
Find personal data and hidden information before you share.
Open tool
Honest limits: permission flags (print/copy/edit) are honoured only by compliant viewers, and signatures are visual images rather than certificate-based digital signatures.
FAQ
Privacy questions, answered
What data does OurPDF collect?
Never your documents. On the public website pages we use Microsoft Clarity for anonymous usage analytics (pages visited, clicks, scrolling) to improve the site; the area where you work with files is masked and Clarity is never loaded in the editor. There are no accounts. Preferences (theme, layout) and autosaved projects are stored only in your browser.
Where are my autosaved projects stored?
In your browser’s IndexedDB on your device. You can rename, duplicate, export or delete them from the Projects dialog, or erase everything in Settings.
How do I know nothing is uploaded?
The editor sends a Content-Security-Policy that only allows connections to its own origin, so the browser blocks requests elsewhere (website pages additionally allow Microsoft Clarity analytics, which never sees your files). You can also open your browser’s network panel or work with the network switched off.
Are passwords stored?
No. Passwords used to open or encrypt a PDF exist only in memory for the operation and are never saved or transmitted.
Is the redaction safe?
Yes. Redacted pages are re-rendered with the marked areas burned in and the original content is dropped from the file. Deleted pages are also purged from saved output.
Ready to work privately?
Pick any tool – your files are processed right here in your browser.