Privacy Policy — PDFduck | Browser-Based, Zero Upload

The short version: Your files never leave your browser. We don't have accounts, so we can't collect personal data. We use Cloudflare for anonymous traffic analytics and Google AdSense to show ads — both described in detail below.

1. Who we are

PDFduck ("we", "us", "our") is a free, browser-based file conversion tool available at https://pdfduck.app. This Privacy Policy explains how we handle information when you visit our website. By using PDFduck, you agree to the practices described here.

2. How file conversion works

This is the most important section. PDFduck performs all file conversions inside your web browser using JavaScript. When you drop a file onto pdfduck.app:

Your file is read locally by your browser
It is processed by client-side libraries (Mammoth.js, SheetJS, JSZip, jsPDF, html2canvas)
The resulting PDF is generated on your device
You download it directly from your browser's memory

At no point does your file leave your device. We have no servers that receive, store, or process your documents. We physically cannot see what you convert — there is no upload happening.

Verifiable claim: You can disconnect your internet after loading pdfduck.app and conversions will still work. You can also inspect network activity in your browser's developer tools (F12 → Network tab) and confirm no file data is transmitted.

3. Information we collect

3.1 Information you provide

None. PDFduck has no sign-up, no user accounts, no contact forms that require personal information, and no payment processing. We don't ask you for anything.

3.2 Information collected automatically

When you visit pdfduck.app, our hosting and analytics providers automatically collect limited technical information:

Anonymous analytics via Cloudflare Web Analytics: page views, browser type, country (not city), referring website, and approximate visit duration. This data is aggregated and does not identify individual visitors.
Server logs from Cloudflare Pages (our hosting provider): IP addresses are processed for security and DDoS protection but are not stored long-term or linked to your activity on the site.
Cookies set by advertising partners as described in Section 5 below.

4. How we use information

We use the limited information collected only to:

Understand which pages are popular so we can improve the site
Detect and prevent abuse, fraud, and security threats
Show relevant advertising to support free operation of the service
Comply with legal obligations

We do not sell, rent, or trade your data. We do not build user profiles. We do not use your data to train AI models.

5. Advertising and Google AdSense

PDFduck displays advertisements served by Google AdSense to keep the service free. As a third-party vendor, Google uses cookies and similar technologies to serve ads on this site.

Google may use information about your visits to pdfduck.app and other websites to provide advertisements about goods and services that may interest you.
Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ads Settings.
You may also opt out of some third-party vendors' use of cookies for personalized advertising by visiting aboutads.info.

For more detail on how Google uses data when you use partner sites, visit policies.google.com/technologies/partner-sites.

6. Cookies

PDFduck itself does not set any first-party cookies. Cookies you may encounter while using the site come from:

Google AdSense — for advertising and frequency capping
Cloudflare — for security (e.g. bot detection) and DDoS protection

You can disable cookies in your browser settings. Disabling cookies will not affect the file conversion functionality — it works entirely without them.

7. Data retention

Because we do not collect personal data, there is nothing to retain. Aggregated analytics data is kept by Cloudflare for up to six months, after which it is automatically deleted.

8. Children's privacy

PDFduck is not directed at children under 13. We do not knowingly collect any information from children. The service is suitable for all ages because no personal data is collected at all.

9. Your rights

Depending on your location, you may have rights under laws such as GDPR (European Economic Area), CCPA (California), or similar regulations elsewhere. These typically include:

The right to know what personal data is collected
The right to request deletion of personal data
The right to opt out of personalized advertising

Because we don't collect personal data from you, there is generally nothing to access, correct, or delete on our end. For advertising preferences, please use the opt-out links in Section 5. For other concerns, contact us using the details below.

10. International users

PDFduck is operated from Türkiye. By using the service, visitors from other countries acknowledge that their interaction with our site may be processed by our hosting provider (Cloudflare) and our advertising partner (Google), both of which operate globally.

11. Third-party links

Our site may link to external websites (for example, in blog content or footer). We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any information.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be highlighted with a notice on the homepage for at least 30 days.

13. Contact

If you have questions about this Privacy Policy or our data practices, contact us through our Contact page or by emailing [email protected].