Privacy: Proven, Not Just Claimed
Every PDF tool on PDFelly runs entirely in your browser. Your files are never uploaded to any server — you can verify this yourself.
Files stay on your device
When you open a PDF, it's read from your local storage into browser memory using the JavaScript File API. It is never sent anywhere.
Processing is local
PDF manipulation uses pdf-lib and pdf.js — open-source JavaScript libraries loaded once and then run entirely in your browser. No server compute.
Verify it yourself
Open your browser's DevTools → Network tab → process any PDF. You'll see zero requests carrying your file data. Only static assets are loaded.
Ad-supported, not data-supported
PDFelly shows Google ads to stay free. Ads use cookies for targeting — but ad scripts never touch your PDF files. Document privacy is absolute.
🔬 Live Proof: Your File Doesn't Move
Drop a PDF below. Watch the monitor — zero upload requests will fire.
Drop any PDF here to test
✓ Only font/CDN library loads appear — your PDF bytes never leave the tab
Privacy Policy
Last updated: June 2026
1. Who we are (Data Controller)
PDFelly is operated by Jackrabbit Exports Private Limited (jackrabbit.in), A505 Knox Plaza, Mindspace, Malad West, Mumbai – 400 064, India. For any privacy request or question, contact us via WhatsApp at +91 98818 98817 or our Contact page. We act as the data controller for the limited data described below.
2. Your files — what we don't collect
PDFelly does not collect, transmit, store, or process your PDF or image files on any server. All processing happens locally in your browser's JavaScript engine. Your file content is never uploaded, and when you close the tab the file data is discarded by the browser. You can verify this with the live network monitor above.
3. What we do collect, and why (legal bases)
Analytics (Google Analytics 4): only after you consent, we collect anonymous, aggregate usage data — tools used, browser type, and broad country‑level geography. No file content. Legal basis: your consent (GDPR Art. 6(1)(a)).
Advertising (Google AdSense): only after you consent, Google may set cookies to show personalised ads, which keep PDFelly free. Legal basis: your consent. Without consent, no analytics or ad‑personalisation cookies are set; Google may set a single functional cookie strictly for fraud and abuse prevention (legal basis: legitimate interests, GDPR Art. 6(1)(f)) — it cannot be used to profile you.
4. Consent & Google Consent Mode v2
On your first visit a consent banner appears. All non‑essential storage is set to denied by default until you choose. Rejecting is as easy as accepting, and you can set granular preferences for analytics and advertising separately. You can change or withdraw consent at any time via the Privacy choices link in the footer of every page. See our Privacy Commitment for the plain‑English version.
5. Cookies & local storage
Necessary (always on): your dark‑mode and recently‑used‑tools preferences and your consent choice are stored only in your browser's localStorage and never leave your device. Google's anti‑fraud functional cookie may be set before consent.
Analytics / Advertising (consent‑based): Google Analytics and AdSense cookies are set only after you accept. You can also opt out via the Google Analytics Opt‑out add‑on and manage ad personalisation at Google Ad Settings.
6. Third‑party processors
We use Google LLC (Analytics & AdSense). Google processes data per its Privacy Policy and Ads Controller terms. Open‑source PDF libraries (pdf‑lib, pdf.js, Tesseract.js) are loaded from the jsDelivr CDN as JavaScript only — they never receive your document data.
7. International data transfers
Where analytics or advertising data is transferred outside the EEA/UK, Google relies on the EU‑US Data Privacy Framework and/or Standard Contractual Clauses as the transfer mechanism.
8. Data retention
We hold no file data at any time. Aggregate analytics data is retained by Google for the period configured in Google Analytics (default 14 months) and then automatically deleted. Local preferences persist on your device until you clear your browser data.
9. Your rights
EU/EEA & UK (GDPR / UK‑GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
USA (CPRA & state laws): you have the right to know, delete, and opt out of the sale/sharing of personal information. We honour the Global Privacy Control (GPC) browser signal as a valid opt‑out — when detected, ad personalisation is disabled automatically.
To exercise any right, contact us via the Contact page.
10. Children
PDFelly is not directed at children under 16 and we do not knowingly collect their personal data.
11. Changes & contact
We may update this policy; the “last updated” date above will change. Privacy questions or requests: WhatsApp +91 98818 98817 or our Contact page.