Privacy Policy

Last updated: 14 October 2026

This policy explains what information S-PDF ("we") collects when you use S-PDF, why, and the choices you have. The short version: we delete your files after 60 minutes, we don't read or sell them, and we keep as little personal data as we can.

1. Files you upload

• Files are sent over an encrypted HTTPS connection and stored in a private folder that is not reachable from the web.
• They are used only to produce the result you asked for (for example a merged, compressed, converted, signed or OCR-processed file). All processing — including Office conversion, text recognition and page rendering — runs on our own servers; we don't send your files to third-party conversion APIs. No person views them and they are never shared, sold or used to train any model.
• Uploads, page previews, signatures and images you add in the editor, and result files are deleted automatically 60 minutes after your last action on them, or immediately when you click "Delete my files now". After deletion they cannot be recovered.
• Photos you send from your phone with Scan to PDF go only into the scan session that created the QR code and are deleted on the same schedule.
• When you use HTML to PDF, our server visits the public web address you enter, as an anonymous visitor, to render it. We don't store the page beyond the 60-minute file lifetime.
• We keep basic, non-content records of each task (tool used, number of files, total size, page count, duration, time) to run the service, enforce limits and fix errors. These records never include file contents. We keep the original file names only while the files exist.

2. Information we collect

• Usage limits: to enforce the free plan we store a salted, one-way hash of your IP address (never the address itself) and a random visitor identifier in a cookie, together with daily usage counts. Anonymous counts are deleted after 35 days.
• Account (optional): email address, name if you provide it, a securely hashed password, plan and usage history (as above, without file contents).
• Payments: handled by Paddle (see section 4). We receive your Paddle customer and subscription IDs, plan, billing status, amounts and dates — never your full card details.
• Messages: what you send through the contact form, with your name and email.
• Emails we send: a log of which transactional email was sent to which address and when.
• Technical logs: our hosting provider's web servers keep standard access logs (including IP address and browser type) for a limited period for security and troubleshooting.

3. Why we use it (legal bases)

• To provide the service you request, run your account and process subscriptions — performance of a contract.
• To prevent abuse, secure the service and enforce fair limits — legitimate interests.
• For optional analytics and personalised advertising — your consent, which you can withdraw at any time via "Cookie settings" in the footer.
• To keep payment records required by tax and accounting law — legal obligation.

4. Service providers

• Hosting: our web host stores the application, database and temporary files.
• Paddle.com is our reseller and merchant of record for Pro subscriptions. Paddle processes your payment and billing details under its own privacy notice.
• Google AdSense (free pages only, when enabled) shows ads and may use cookies; in the EEA, UK and Switzerland a Google-certified consent tool asks for your choice first. See how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
• Analytics: Google Analytics 4 in Google's Consent Mode. Until you accept analytics cookies, it only receives cookieless, anonymous visit signals (page viewed, rough country, device type) — no cookies and no identifier that recognises you. If you accept, it may use its own cookies to measure repeat visits.
• Cloudflare Turnstile (when enabled) checks that forms are submitted by humans.
• Donation platforms (Ko-fi, Buy Me a Coffee, PayPal, Stripe or GitHub Sponsors, when linked on our Donate page) process donations on their own sites under their own privacy notices. We only learn what the platform shares with us, such as your name and amount if you choose to show them.
• cdnjs (Cloudflare) serves a small QR-code script on the Scan to PDF page; your browser contacts it directly.

Some providers may process data outside your country. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

5. How long we keep data

• Uploaded files, previews and results: 60 minutes after your last action.
• Anonymous usage counters: 35 days. Rate-limit records: 2 days.
• Account data: until you delete your account (Account → Delete account).
• Payment records: as long as tax law requires.
• Contact messages: up to 24 months, then deleted.

6. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. You can delete your account yourself at any time. For anything else, email support@s-pdf.com. You can also complain to your local data protection authority. We do not sell or "share" personal information as defined by the California Consumer Privacy Act.

7. Children

S-PDF is not directed at children under 13 (or under 16 in the EEA), and we don't knowingly collect their personal data.

8. Changes and contact

We'll update this page when our practices change and adjust the date at the top. Questions: support@s-pdf.com
S-PDF