Privacy Policy

The short version

We do not see, collect, upload, or store the files you work with. Every operation (merge, split, compress, convert, edit, and so on) runs locally in your browser. Your file is held in memory only for as long as you are on the tool page, and is actively erased the moment you leave it or close the tab.

Who we are

PDFER (“we”, “us”) is operated by Kiril Urbonas. For any privacy question or request you can email us at privacy@pdfer.cc. This page explains how we handle personal data under the EU/UK General Data Protection Regulation (GDPR) and similar laws.

Your files

Files you open are processed client-side — inside your own browser, using WebAssembly and JavaScript. They are never transmitted to our servers, never written to disk by us, and never retained. When you navigate away from a tool, the file's data is overwritten in memory and released. We therefore hold no copy of your documents at any point.

Personal data we collect

None that identifies you. PDFER works with no account, no sign-up, and no email address. We do not use advertising or analytics that profile you, and we set no tracking cookies.

• No accounts, names, or email addresses.
• No tracking, advertising, or profiling cookies.
• No advertising, behavioural profiling, or cross-site tracking.
• No file content — it never reaches us.

Aggregate, privacy-friendly analytics

To understand overall traffic and keep the site fast, we use Vercel Web Analytics and Vercel Speed Insights. These are cookielessand privacy-friendly by design: they record only aggregate, anonymised signals — such as page views, referrer, approximate country, device type, and Web Vitals performance metrics — and do not set cookies, build a profile of you, or track you across other sites. They never have access to your files, which are processed entirely on your device. This data is processed by Vercel as our processor under a data-processing agreement, on the basis of our legitimate interest in operating and improving a reliable service (Art. 6(1)(f) GDPR). You can read Vercel's analytics privacy documentation for the technical detail.

Technical data processed by our host

PDFER is served from Vercel. Like any website, our hosting provider may process limited technical request metadata (such as IP address and browser user-agent) transiently in order to deliver the site, secure it, and keep it running. This is processed by Vercel as our processor under a data-processing agreement; we do not use it to identify you and never combine it with your files. The lawful basis for this minimal processing is our legitimate interest in operating a secure, reliable service (Art. 6(1)(f) GDPR).

Cookies & local storage

We do not use tracking, analytics, or advertising cookies, so no cookie consent banner is legally required. Any browser storage we use is strictly functional and stays on your device — for example, a small flag stored locally to remember that you dismissed our “no tracking cookies” notice. None of it identifies you or leaves your browser.

Your rights

Under the GDPR you have the right to:

• access, rectify, or erase your personal data;
• restrict or object to processing;
• data portability;
• lodge a complaint with your local data protection authority.

Because we do not store your files and do not build user profiles, in most cases there is simply no personal data of yours for us to provide, change, or delete. For any host-level technical logs, contact us and we will assist.

International transfers

Our hosting infrastructure (Vercel) may serve and process technical request data from regions including the EU and the US, under the appropriate safeguards offered by the provider (such as Standard Contractual Clauses).

Israel — Protection of Privacy Law (Amendment 13)

For users in Israel, PDFER is designed to align with the Protection of Privacy Law, 5741–1981, as amended by Amendment 13 (in force since 14 August 2025), and the Protection of Privacy (Data Security) Regulations, 5777–2017.

• No database of personal information.Because your files are processed locally and never stored on our servers, we do not maintain a database (“מאגר מידע”) of your personal information. The obligations that attach to operating such a database — including registration and the mandatory appointment of a Data Protection Officer — are therefore not triggered for the documents you process.
• Data security.Our measures — encryption in transit, no data at rest, strict access controls, and a content-security policy that prevents data from leaving your browser — are designed to meet the standard of reasonable and appropriate security set by the Data Security Regulations.
• Your rights.You may ask to review (section 13) or correct (section 14) any personal data we hold about you. As explained above, we typically hold none.
• Supervision. The Israeli Privacy Protection Authority (PPA) oversees compliance; you may contact it if you believe your privacy rights have been infringed.

Questions about Israeli privacy law can be sent to privacy@pdfer.cc.

Children

PDFER is a general-purpose utility and is not directed at children, and we do not knowingly collect any personal data from them.

Changes

We may update this policy as the product evolves. The “last updated” date above always reflects the current version.

Security

For details of the technical and organisational measures that protect the service, see our Security & Compliance page.