Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how PDFEdtar, the operator of PDF Toolbox ("PDFEdtar", "we", "us" or "our") collects, uses and protects information when you use the PDF Toolbox website and tools at pdfedtar.com (the "Service"). By using the Service you agree to the practices described here.

1. Our privacy-first design

The Service is built so that your documents stay with you. All PDF and image processing happens locally inside your web browser. The files you open in our tools are never uploaded to our servers, never stored by us, and never transmitted to any third party. When you close or reload the page, those files are gone from the app.

2. Information we collect

We collect only the limited information needed to provide accounts and subscriptions:

• Account information. When you create an account, our authentication provider (Supabase) stores your email address and a securely hashed password. We never see or store your password in plain text.
• Subscription information. If you purchase PRO, our payment processor (Stripe) handles your payment. We store a record of your subscription status (for example: active, canceled), your Stripe customer/subscription identifiers, your email, and the renewal date, so we can unlock premium features for your account.
• Payment details. Card numbers and billing details are collected and processed directly by Stripe. We do not receive or store your full card information.
• Local storage. We store your login session in your browser's local storage so you stay signed in. This stays on your device.
• Technical data. Our hosting provider (Netlify) may process standard server logs such as IP address, browser type and timestamps for security and reliability. We do not use these to identify you.

We do not collect the contents of your documents, and we do not sell your personal information.

3. How we use information

• To create and secure your account and keep you signed in.
• To process payments and manage your subscription and access to PRO tools.
• To respond to your support requests and communicate important service or billing notices.
• To maintain the security, integrity and performance of the Service and to comply with legal obligations.

4. Cookies and similar technologies

We do not use advertising or tracking cookies. We use only essential browser storage (local storage) to keep you signed in. Our providers (Supabase, Stripe, Netlify) may set essential cookies or tokens required for authentication, payment and security.

5. Third-party service providers

We share the minimum necessary information with trusted processors who help us run the Service:

• Supabase — authentication and account management.
• Stripe — subscription payments and billing.
• Netlify — website hosting and serverless functions.

Each provider processes data under its own privacy policy and appropriate safeguards. We do not authorise them to use your information for their own marketing.

6. Data retention

We keep account and subscription records for as long as your account is active and as needed to comply with legal, tax and accounting requirements. You may request deletion of your account at any time (see "Your rights"). Because your documents are never uploaded, there is nothing for us to retain from your file processing.

7. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS), hashed passwords, secure server-side handling of secret keys, and signature-verified payment webhooks. No method of transmission or storage is completely secure, but we work to protect your data.

8. Your rights

Depending on your location (including under the EU/UK GDPR and the California CCPA), you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at info@pdfedtar.com. We will respond within the timeframe required by applicable law.

9. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

10. International users

Your information may be processed in countries other than your own, where our service providers operate. We take steps to ensure your data receives an adequate level of protection wherever it is processed.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes means you accept the revised policy.

12. Contact us

For any privacy questions or requests, contact: