We do not receive your documents

Your files

Every tool on this site runs inside your browser. The document you choose is read into your browser's memory, processed there, and released when you leave the page. It is never transmitted to this site or to anyone else, it is never stored, and it cannot be recovered by us — we never have it. You can confirm this in your browser's network panel, or by using a tool with the device offline.

What you type

The text you search for in the redaction tool, the markup you paste into the HTML converter and the password you choose in the protect tool are used only by code running on that page. None of them is ever placed in the address bar, in browser storage, in a network request or in any file this site produces. The password in particular exists only in that tab's memory while you type it: it is used to derive the document's encryption key and is then gone, which is also why nobody — including us — can recover a protected file.

What this browser remembers

If you pin a tool, open one, or change a setting inside a tool's options panel, that is written to this browser's own storage under the single name steadypdf.local. It holds the tool names you pinned, the last few tool names you opened, and your chosen settings — nothing else, and nothing about any document. It never leaves the device, it is not an account, no identifier is created and there is nothing here to sign in to. The Clear what this browser remembers button under the tool list removes all of it. The cookies page lists both stored names in full.

Analytics

Every page loads one measurement script, from our own analytics service at analytics.pagefabrica.com. We run that service ourselves; it is not Google Analytics and it is not shared with an advertising network.

It sets no cookie and creates no identifier. Nothing is written into this browser for measurement — no cookie, no local storage, no session value — so there is nothing to clear and nothing that can follow you to another site.

What it receives is the address of the page you are on, its title, the address you arrived from, your browser's language and your screen size. From the request itself it derives coarse statistics — country, browser, device type — and forms an anonymous session hash from your network address and browser so that several page views in a day are counted as one visit rather than several. The network address itself is not stored.

It also receives three named events, and only these three: tool_opened when a tool's interface is ready to use, job_completed when a job finishes and produces its result, and check_failed when a finished file fails the check that would have let you download it. None of them carries any detail at all — an event is a name and nothing else. That is enforced in the code that sends them, which accepts those three names and refuses every other name and every property, so there is no channel through which a file name, a page count, a search term, a password or any part of a document could reach us. Which tool an event belongs to is known only because the page address is recorded with it.

We use this to see whether the tools work and whether people can finish what they came to do, under our legitimate interest in running and improving them. The tag honours your browser's Do Not Track setting: with it on, nothing is sent at all. You can also block the address above, or write to support to object.

Advertising

Advertising space is reserved on some pages and is currently empty: no advertising code is loaded and no advertising cookie is set. When advertising is switched on, it will be Google AdSense. Google and its partners may then use cookies, device identifiers, approximate location derived from your IP address and interaction data to select, deliver, secure and measure advertisements. Nothing from your documents is available to them, because nothing from your documents is available to this site.

Where consent is required — the EEA, the United Kingdom and Switzerland — Google’s certified consent platform asks before any advertising purpose that needs consent, and provides a way to reject or manage those choices. Refusing is exactly as easy as accepting, in the same place and the same style, and nothing advertising-related loads until you have answered. That platform runs only when advertising is switched on; on this build nothing of it is loaded.

Server logs

Like every website, the host that serves these pages records ordinary request information such as the address requested, the time, the browser's user-agent string and the network address of the request. That is the transport of the page itself; it never includes your document, its name or its contents.

Your rights and your questions

Because we hold no account, no profile and no file, there is usually nothing for us to show you, correct or erase. You can still write to support with any question about this policy. Please do not attach the document you were working on: we do not need it, and we would rather not have it.