- PDFGym
- Privacy
Privacy at PDFGym
Your PDF is opened, changed, and saved inside the browser tab in front of you. It is never uploaded, no account is asked for, and no usage tracking runs until you accept analytics cookies in the cookie bar. Apart from that optional analytics, the only thing that ever leaves your browser on purpose is an email you write yourself.
Your documents never leave the tab
Each tool is code that runs where the file already sits: on your device. The document you pick is opened by that code and never handed to a server for processing, for measuring, or for any other reason.
We never write it to disk on our side. Once you close the tab, nothing of it remains with us. There is no feedback attachment, no error upload, and no background sync that could carry it out.
Nothing is measured until you say yes
Most sites observe every visit. This one observes nothing by default: no measuring script runs, no cookie is set, and there is no tally of tool runs, no session recording, no A/B testing, and no advertising network. That is the standing state until you accept analytics cookies in the cookie bar.
Until you accept, your visits, your settings, your run times, and your errors are visible to your browser alone. This is not a mode you must enable; it is the absence of the code that would do the observing. Consent stays denied and the analytics scripts are not even loaded before you click Accept.
Measuring is opt-in. The "If you accept analytics" section below names the services, lists what they record, and shows how to change your choice. Without your yes, the paragraph above is the whole policy.
If you accept analytics
On your first visit, a bar at the bottom of the page asks whether analytics cookies may be used. Nothing loads and nothing is stored until you click Accept, and Decline sits right beside it.
If you accept, Google Tag Manager loads two services. Google Analytics 4 counts page views, which tools are used, and your device type and country. It sets the cookies _ga and _ga_*, which last up to 2 years.
Microsoft Clarity records anonymised sessions and heatmaps of the page. It sets the cookies _clck and _clsk, which last up to 1 year. Google and Microsoft process that data under their own privacy policies.
Analytics never sees your files: not their names, not their contents, nothing you type into a PDF. It only sees page views and how you use the tool interface, such as which tool ran and whether it succeeded or failed.
Your choice is remembered for 12 months in your browser's local storage. That is strictly necessary storage, not tracking. After that, the bar asks again. You can change your mind at any time:
The network path of a visit
Serving a page means your browser requests files, and those requests travel like any web traffic. PDFGym pages are served through Cloudflare, so Cloudflare sees the standard facts of each request: your IP address, the page asked for, the time. Cloudflare processes those facts under its own terms.
By default this site adds nothing to that: no measuring beacon, no third-party widget, no font or script pulled from another company's server. The only exception is the analytics you may accept in the cookie bar, which loads scripts from Google and Microsoft after you say yes, and nothing before.
None of this needs to be taken on trust. Open the developer tools, switch to the network panel, clear it, then pick a file and run a tool.
The panel lists each outgoing request with its size and destination: this site's code, the analytics requests if you accepted them, and nothing carrying your document.
There is an even shorter test. Open a tool page and switch off the network before picking a file.
The tool keeps working and still hands you a download, because the tab already holds everything it needs.
An uploading tool could never do that.
| What | Leaves your browser? |
|---|---|
| Your PDF and everything in it | Leaves your browser?Never: file, name, text, metadata, previews, output |
| Tool runs, settings, timings | Leaves your browser?Not by default. Only after you accept analytics cookies, and then just page views and which tool ran, never file data |
| Pages you open | Leaves your browser?Cloudflare sees standard request facts while serving them |
| Email you send us | Leaves your browser?Only the message you write yourself |
The email you choose to send
The one deliberate way out is [email protected].
Whatever you put in that message, the tool page, the error text, your browser, is what we receive, and nothing else.
Write in any language and never attach the document itself. The support page explains what helps and what to leave out.
No account, no name
No tool needs an account and none asks for your name. Without accounts there is no user database to leak, to sell, or to be ordered to hand over. An email address exists only inside messages you send, and only so a reply can reach you.
Hidden details inside your PDF
A PDF can quietly store your name, the software you used, the file path, and the creation date, whether you meant it to or not.
Those details stay inside the file, and the file stays with you.
The Privacy scan tool shows what your file reveals, and Remove metadata takes those details out before you send the file to a stranger. Both run in this tab like every other tool.
Short answers about privacy
- Is my PDF uploaded anywhere?
- No. Opening, processing, checking, and downloading all happen in your browser tab. Disconnect from the network after the page loads and the tool still works, which an uploading tool could not do.
- What usage tracking runs here?
- None by default. Nothing is measured and no cookie is set unless you accept analytics cookies in the cookie bar. After you accept, Google Analytics and Microsoft Clarity run through Google Tag Manager; the "If you accept analytics" section above lists what they record. File names and contents are never part of it.
- What does Cloudflare see?
- Cloudflare serves the pages, so it sees standard request facts such as IP address, page, and time, as it does for any site it serves. That traffic carries no document content, because no request here ever contains it.
- Do I need an account or a login?
- No, and there is nothing to log into. No name is asked and no database of users exists.
- How do I delete everything you hold about me?
- Unless you wrote to us or accepted analytics cookies, there is nothing to delete: your files never arrived and nothing else was recorded. After you accept analytics, that data is processed by Google and Microsoft under their own privacy policies, and you can clear the cookies in your browser at any time. An email you sent can be deleted on request; just ask from the same address.
Tools that protect your documents
- Every online PDF tool Browse the full set of PDF tools in one place, grouped by the job each one does.
- How it works See how a file is read, changed, and checked inside the tab, with no upload step.
- PDF privacy scan Read what your PDF reveals about you before a stranger sees it.
- Remove metadata from PDF Take the author, software, and timestamps out of a PDF before you send it.
- Redact PDF Destroy private text, images, and areas inside a PDF for good.