Privacy Policy
Summary
- We never upload your files. All processing happens entirely inside your browser. No PDF is ever sent to a server, so no document of yours exists on our side — and there is no “upload, then delete” step to speak of.
- We never store your passwords. A password you type lives only in your browser’s memory: it is not uploaded, not saved, not logged, and it disappears the moment the page is closed. Encryption is done by the browser’s own Web Crypto API.
- We never ask you to register. No account, no email address, no credit card.
1. Our core promise: your files never leave your device
SecurePDFNow is a set of browser-based tools for working with PDFs and images: Protect PDF, Unlock PDF, Compress PDF, Merge PDF, Split PDF and Image to PDF. Every operation runs as JavaScript inside your own browser tab.
Your files are never uploaded to any server. They are not sent to us, they are not stored by us, and we cannot access, read, copy, share or recover them. No document is ever saved on a backend server — there is no server-side copy of your files, no database entry, no temporary directory and no log that could contain them. When you close the tab, the files are gone from the tool as well.
This is where we part company with ordinary online PDF sites, which follow an “upload → process → delete” model: your document travels to their hardware, is written to disk, is processed there and is removed later on their retention schedule. Even when such a service deletes the file promptly and honestly, the document still existed on somebody else’s machine, inside their trust boundary and their risk model. We are not in that risk model at all: there is nothing of yours on our side to leak, subpoena, sell or lose.
2. What the tools can and cannot do
So that you know exactly which security features you are relying on:
- Password protection. Protect PDF adds encryption to a document you already own: AES-256 encryption with a password you choose, plus optional permission restrictions such as disallowing printing, copying or editing.
- Unlocking. Unlock PDF removes restriction settings from documents you are entitled to use. If a document also carries an open password, you must know and enter that password — unlocking is decryption with a key you supply, not a bypass.
- Everyday tools. Compress PDF, Merge PDF, Split PDF and Image to PDF keep working exactly as before.
We do not offer, and cannot perform, password cracking. There is no brute force, no dictionary attack, no recovery service and no way for us to open a document whose password you do not know. We hold no keys, no copies and no recovery mechanism, because your file never reaches us in the first place.
3. What we do not collect
- No account information. The tools require no sign-up, no login, no email address and no payment details.
- No file contents. The bytes of your PDFs and images are processed locally in your browser and are never transmitted to us.
- No file metadata. File names, page counts, sizes, document properties and similar details are not sent to us either.
Because we do not receive your files, we cannot sell, license, disclose or hand them over to anyone — there is nothing on our side to give.
4. Local storage on your own device
To keep the free daily usage limit working, the site stores a small counter in your browser’s localStorage. The keys look like this: spn_<tool>_<date> (for example spn_merge_2026-09-23), and the value is a simple number of uses for that tool on that day.
This information:
- stays on your own device — it is never transmitted anywhere;
- is used only to enforce the free daily usage limit;
- contains no personal information, no file names and no file contents.
You can erase it at any time by clearing your browser’s site data / cookies and other site data. After that, the counter simply starts over.
5. Static assets and third-party services
The site is a static website. Loading a page does involve a small number of network requests for static assets, and none of those requests contains your documents:
- Fonts (Google Fonts). Typography is loaded from Google’s servers, so Google receives a request that includes your IP address and user agent. That request says nothing about any file you open in the tools.
- Scripts and styles. The JavaScript and CSS that do the actual PDF work are served from this site itself. Loading them reveals only which static file was fetched — never a document, a file name or a password.
- Advertising (Google AdSense, if enabled). Ads help pay for hosting so the tools can stay free. Google and its partners may set cookies or read device identifiers to measure and personalise ads. That is about the pages you visit, not about the files you process.
- Analytics (if enabled). Aggregated, anonymous traffic statistics may be collected to understand which tools are used. No file data is involved.
Current status: no analytics and no advertising are enabled on this site. There is no advertising code, no tracking or analytics script, and no cookie of our own on any page. The two bullets above are written so that this policy stays accurate if those features are ever switched on: they take effect only from the moment such a feature is actually enabled, and the effective date at the top of this page will be updated at that time.
In short: requests for static assets are about the page, not about your PDF. No document content, no file name, no password and no decryption key is ever part of any network request made by these tools. No document is stored on a backend server, so there is no server-side retention window, deletion queue or backup to reason about.
These third parties operate under their own privacy policies and may collect anonymous usage data or use cookies. You can read more here, and you can refuse or delete cookies at any time in your browser settings — the PDF tools will keep working, because they do not depend on cookies or on network access:
- Google Privacy Policy — https://policies.google.com/privacy
- Google Ads Settings (opt out of personalised advertising) — https://adssettings.google.com
6. Your rights
We process files locally within your browser. We do not receive or store a copy of your documents on our servers at any time.
That single fact shapes everything below: there is no server-side copy of your documents for anyone to access, correct, export or delete, so a data-subject request about document content has nothing to act on. The rights in this section therefore concern the limited data that can exist on our side — ordinary connection data recorded by our hosting provider (such as IP address and user agent), and cookies or device identifiers set by analytics or advertising services if and when we enable them.
Where data protection law grants you these rights, we will honour them:
- Access — ask what personal data we hold about you.
- Rectification — have inaccurate personal data corrected.
- Erasure — have personal data about you deleted.
- Restriction and objection — ask us to restrict or stop processing your data, including objecting to processing based on legitimate interests.
- Portability — receive the data you provided to us in a structured, commonly used, machine-readable format.
- Withdraw consent — withdraw any consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.
- Complaint — lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or the place of the alleged infringement.
To exercise any of these rights, write to uslanhai56@zohomail.com. Please note that we cannot return, restore, export or delete a document you processed in the tools — we never received it.
Applicability. The parts of this section that concern analytics and advertising apply only from the moment such a feature is enabled. As of the effective date shown at the top of this page, this site runs no visitor analytics and no advertising, and sets no cookies of its own.
7. Children’s privacy
SecurePDFNow is a general-purpose utility site and is not directed at children under 13. We do not knowingly collect personal information from children. Since we do not collect personal information from any user, there is nothing for us to delete on request from a child’s account.
8. Changes to this policy
This policy may be updated if the site’s behaviour changes — for example, if a new tool or a new third-party service is added. The effective date at the top of this page will always show the latest revision. Continued use of the site after an update means you accept the revised policy.
9. Contact
The data controller for this website is the operator of securepdfnow.com. Questions about this policy, and requests to exercise any of the rights set out in section 6, can be sent to uslanhai56@zohomail.com.