Privacy: Proven, Not Just Claimed

Every PDF tool on PDFelly runs entirely in your browser. Your files are never uploaded to any server — you can verify this yourself.

Files stay on your device

When you open a PDF, it's read from your local storage into browser memory using the JavaScript File API. It is never sent anywhere.

Processing is local

PDF manipulation uses pdf-lib and pdf.js — open-source JavaScript libraries loaded once and then run entirely in your browser. No server compute.

Verify it yourself

Open your browser's DevTools → Network tab → process any PDF. You'll see zero requests carrying your file data. Only static assets are loaded.

Ad-supported, not data-supported

PDFelly shows Google ads to stay free. Ads use cookies for targeting — but ad scripts never touch your PDF files. Document privacy is absolute.

🔬 Live Proof: Your File Doesn't Move

Drop a PDF below. Watch the monitor — zero upload requests will fire.

Drop any PDF here to test

Network log will appear here when you drop a file above

✓ Only font/CDN library loads appear — your PDF bytes never leave the tab

Privacy Policy

Last updated: June 2026

1. Who we are (Data Controller)

PDFelly is operated by Jackrabbit Exports Private Limited (jackrabbit.in), A505 Knox Plaza, Mindspace, Malad West, Mumbai – 400 064, India. For any privacy request or question, contact us via WhatsApp at +91 98818 98817 or our Contact page. We act as the data controller for the limited data described below.

2. Your files — what we don't collect

PDFelly does not collect, transmit, store, or process your PDF or image files on any server. All processing happens locally in your browser's JavaScript engine. Your file content is never uploaded, and when you close the tab the file data is discarded by the browser. You can verify this with the live network monitor above.

3. What we do collect, and why (legal bases)

Analytics (Google Analytics 4): only after you consent, we collect anonymous, aggregate usage data — tools used, browser type, and broad country‑level geography. No file content. Legal basis: your consent (GDPR Art. 6(1)(a)).

Advertising (Google AdSense): only after you consent, Google may set cookies to show personalised ads, which keep PDFelly free. Legal basis: your consent. Without consent, no analytics or ad‑personalisation cookies are set; Google may set a single functional cookie strictly for fraud and abuse prevention (legal basis: legitimate interests, GDPR Art. 6(1)(f)) — it cannot be used to profile you.

4. Consent & Google Consent Mode v2

On your first visit a consent banner appears. All non‑essential storage is set to denied by default until you choose. Rejecting is as easy as accepting, and you can set granular preferences for analytics and advertising separately. You can change or withdraw consent at any time via the Privacy choices link in the footer of every page. See our Privacy Commitment for the plain‑English version.

5. Cookies & local storage

Necessary (always on): your dark‑mode and recently‑used‑tools preferences and your consent choice are stored only in your browser's localStorage and never leave your device. Google's anti‑fraud functional cookie may be set before consent.
Analytics / Advertising (consent‑based): Google Analytics and AdSense cookies are set only after you accept. You can also opt out via the Google Analytics Opt‑out add‑on and manage ad personalisation at Google Ad Settings.

6. Third‑party processors

We use Google LLC (Analytics & AdSense). Google processes data per its Privacy Policy and Ads Controller terms. Open‑source PDF libraries (pdf‑lib, pdf.js, Tesseract.js) are loaded from the jsDelivr CDN as JavaScript only — they never receive your document data.

7. International data transfers

Where analytics or advertising data is transferred outside the EEA/UK, Google relies on the EU‑US Data Privacy Framework and/or Standard Contractual Clauses as the transfer mechanism.

8. Data retention

We hold no file data at any time. Aggregate analytics data is retained by Google for the period configured in Google Analytics (default 14 months) and then automatically deleted. Local preferences persist on your device until you clear your browser data.

9. Your rights

EU/EEA & UK (GDPR / UK‑GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
USA (CPRA & state laws): you have the right to know, delete, and opt out of the sale/sharing of personal information. We honour the Global Privacy Control (GPC) browser signal as a valid opt‑out — when detected, ad personalisation is disabled automatically.
To exercise any right, contact us via the Contact page.

10. Children

PDFelly is not directed at children under 16 and we do not knowingly collect their personal data.

11. Changes & contact

We may update this policy; the “last updated” date above will change. Privacy questions or requests: WhatsApp +91 98818 98817 or our Contact page.