Skip to content

Privacy Policy

Last updated

The short version: your files are processed on your own device and never reach our servers. There are no accounts, we set no cookies of our own, and the analytics we use cannot identify you. The rest of this page is the full picture, in plain language.

Who we are

pdfcasa.com is a free collection of PDF and image tools, built and operated by an independent developer. For data-protection purposes, the operator of pdfcasa.com is the data controller. For anything related to this policy, email contact@pdfcasa.com.

Your files never leave your device

Every tool currently on PDFCasa runs entirely in your browser, using JavaScript and WebAssembly. When you choose a file, it is read into your device's memory, processed there, and the result is saved from there. The file is not uploaded. We never see its contents, its name, or the fact that it existed. Nothing is stored anywhere once you close the tab.

This has two consequences worth spelling out:

  • We cannot recover a file for you. If you close the tab before saving a result, it is gone — there is no copy on our side, because there was never a copy on our side.
  • We could not hand your documents to anyone — an advertiser, an attacker, a government — even if compelled to, because we do not have them.

If we ever add a tool that genuinely cannot work without server processing, its page will say so clearly before you choose a file. Any such transfer will be encrypted, processed in memory, and never stored.

What we do receive

Standard request data

PDFCasa is served through Cloudflare. Delivering any web page involves the request metadata every website receives: your IP address, browser user agent, and the URL you asked for. Cloudflare processes this on our behalf to route traffic and to protect the site from attacks and automated abuse, on the legal basis of legitimate interest. We do not use it to identify visitors. Cloudflare's handling of this data is described in the Cloudflare Privacy Policy.

Analytics

We use analytics to understand which tools people find useful. It reports in aggregate — which pages were visited, from which country, on which browsers — and is not used to identify you or to build a profile. The provider we use, Google Analytics, sets cookies, so it does not load at all until you accept the on-page choice; declining costs you nothing and every tool works identically either way. If we later add a cookieless provider that needs no consent choice, this section will say so before it is switched on.

International transfers

PDFCasa is served from a global network, so the request data described above is processed in the country closest to you and may be handled in the United States or elsewhere. Where data originating in the EEA, the UK, or Switzerland is transferred outside those areas, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent approved safeguard. Because your files are never transmitted, they are never subject to any international transfer.

Advertising and your choices

PDFCasa is intended to be free because it is supported by advertising, but no ads run on the site today — we have not yet been approved for Google AdSense, and nothing advertising-related is active. This section describes what will be true once that changes, so you know what to expect rather than discovering it later.

Once ads are live, they will be served by Google AdSense, and Google and its partners may use cookies or device identifiers to select and measure them, including personalising them where you have allowed that. Before any advertising or other non-essential cookie is set, you will be shown a consent choice through a consent management platform — in the EEA, the UK, and Switzerland, a Google-certified platform operating under the IAB Transparency and Consent Framework, so nothing non-essential runs until you allow it, and you can change or withdraw your choice at any time from the same panel. In US states with privacy laws, the equivalent panel will let you opt out of the sale or sharing of personal information and of targeted advertising. Elsewhere, the same controls will be offered to everyone — we do not think a person's rights here should depend on their postcode.

Declining will cost you nothing. Every tool will work identically with or without consent; the ads will simply be non-personalised instead.

You can learn more and exercise choices directly with Google and the ad industry:

Cookies

PDFCasa itself sets no cookies: there is no login and no tracking. Two narrow exceptions can occur:

  • Security. Cloudflare may set a strictly necessary cookie when defending the site against automated abuse. It distinguishes bots from people, not one person from another, and expires within about thirty minutes.
  • Analytics and advertising. Set by Google and its partners, only in line with the choices described above, and never before you have made them where consent is required.

Your cookie choice itself is recorded in your browser's local storage, not in a cookie and not on our servers — clearing your browsing data resets it. You can change it at any time:

Your rights, wherever you are

Privacy law differs by country, but our answer does not. Because PDFCasa has no accounts, no database, and no copy of your files, there is in almost every case nothing for us to look up, export, or erase — deletion is the system's resting state rather than a request we process. We extend the same core rights to everyone, regardless of where they live.

EEA, UK, and Switzerland

Under the GDPR, the UK GDPR, and the Swiss FADP you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. Where we process request data to keep the site available and secure, our legal basis is legitimate interest; where cookies are not strictly necessary, it is your consent, which you may withdraw at any time. You may also lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office.

United States

Residents of California and of other states with comprehensive privacy laws — including Colorado, Connecticut, Texas, Virginia, and a growing list of others — have rights to know, delete, correct, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell your personal information, and we do not share it for cross-context behavioural advertising except through the advertising choices described above, which you control through the consent panel. We do not use sensitive personal information, and we do not discriminate against anyone for exercising a privacy right.

Other regions

Comparable rights under laws such as Canada's PIPEDA, Brazil's LGPD, Australia's Privacy Act, Japan's APPI, South Korea's PIPA, South Africa's POPIA, and India's DPDP Act are honoured on the same terms. If your country's law grants a right not listed here, ask for it and we will apply it.

To exercise any right, or if you believe we hold something about you, email contact@pdfcasa.com. We answer every request ourselves, free of charge, and will not ask you to create an account to do it.

How long anything is kept

Your files: not at all — they are never received. Security and traffic logs held by Cloudflare on our behalf are retained for a short period, typically days, and then discarded. Analytics is stored only in aggregate and cannot be traced back to a person. We keep no other records, because there are none to keep.

Children

PDFCasa is a general-audience service and does not knowingly collect personal information from anyone, including children under 13 (or under 16 where local law sets that threshold). We do not direct the service at children, and because we do not collect personal information from any visitor, we do not knowingly collect it from them either. If you believe a child has provided personal information to us, contact us and we will act on it.

Changes to this policy

If this policy changes — for example, when a server-side tool or a paid tier is added — this page will be updated and the date at the top will reflect the current version.

Contact

Questions about privacy on PDFCasa: contact@pdfcasa.com.