Privacy

Tools that run in your browser

Tools marked “On device” (like Merge, Split, Edit, Sign and PDF to Word) process your files inside your browser. The files are never sent to us or anyone else, and they’re gone when you close the tab.

Tools that run on our server

Tools marked “Encrypted” (Compress, Repair, Unlock, Protect, PDF/A, Word/PowerPoint/Excel to PDF and HTML to PDF) upload your file over HTTPS. On arrival it’s encrypted with a fresh key that is handed to your browser and not kept by us, so stored files can’t be read without it.

Your file is processed in an isolated sandbox and deleted as soon as your browser downloads the result. Anything left behind (for example if you close the tab) is deleted automatically after one hour. We don’t back up these files. Passwords you type for Unlock or Protect are used for that one job and never stored.

Bot protection

Server tools use Cloudflare Turnstile to check that a person, not a bot, starts each job. Turnstile runs only on those pages and processes technical signals such as your IP address and browser details under Cloudflare’s privacy policy. It doesn’t use advertising cookies.

What we log

Our server logs the page or API route, the status and the time it took. It doesn’t log IP addresses, file names, file contents, passwords or job identifiers. To limit abuse we keep a short-lived, salted hash of your IP address in memory; the salt changes every day and is never stored.

Cookies and tracking

hellpdf sets no cookies and uses no analytics, advertising or third-party tracking scripts.

Contact

Questions about privacy: [email protected].