Privacy Policy

LoverPDF is built so that most tools never see your documents. This policy explains exactly what happens to your files, what we store, and for how long. It describes how the service actually works today.

Tools that run on your device

Merge, split, organize, rotate, delete and extract pages, crop, resize, pages per sheet, booklet, remove blank pages, JPG to PDF, PDF to JPG, extract images, watermark, page numbers, sign, redact, sanitize, edit metadata, flatten, Protect PDF, Unlock PDF and local compression run in your browser. The contents of your files are not uploaded to us or to anyone else while you use these tools.

If you choose to save signatures in Sign PDF, they are stored in your browser's local storage on this device only. Turning the option off, or deleting a signature, removes it.

If you turn on “Keep files on this device”, your files and page arrangement are stored in your browser's IndexedDB so the workspace survives a reload. They stay on your device. Clearing the workspace or turning the option off deletes them.

Tools that use our server

Advanced compression, Word, Excel and PowerPoint to PDF, OCR, PDF to PDF/A, grayscale conversion and Repair PDF run on our server, because they need software that doesn't run in a browser. Each of these tools is labelled “Secure server” before you start.

• Files are sent over an encrypted (TLS) connection and stored on a private volume that is not publicly reachable.
• Each job gets a random identifier and a secret access token. Only the browser that created the job holds the token; we store only a keyed hash of it.
• After a successful download, our app immediately asks the server to delete the job's files. If that request doesn't arrive — for example because you closed the tab — files are deleted automatically at the latest 60 minutes after upload, whether or not you downloaded the result.
• The original upload is deleted as soon as the result has been produced. Failed and cancelled jobs are cleaned up immediately.
• We do not look at, copy or share your documents, and we never use them to train any model. OCR runs with open-source Tesseract on our own server; text is not sent to any external or AI service.

Passwords

Protect PDF and Unlock PDF run in your browser: the password you enter is used on your device to encrypt or decrypt the file and is never sent to us. It isn't written to logs, analytics or storage, and the form is cleared once the file is ready. We cannot recover a forgotten password.

What we store about server jobs

• Operation type, status, timings, file size and error code — no file names and no document content.
• A keyed, non-reversible hash of your IP address, used to enforce fair-use limits (for example, two simultaneous server jobs per visitor).
• These job records are deleted 7 days after the job expires. Rate-limit counters expire within an hour.

Usage statistics

We count anonymous product events — such as “a tool was opened” or “processing completed” — to understand which tools are used and where they fail. Each event can only contain the tool name, whether processing was local or on the server, a file size range (for example 1–5 MB), a duration and an error category.

Events never include file names, document contents, passwords, PDF text or what you type into Smart Actions. They are stored on our own server, not sent to third-party analytics, and kept for 90 days. We don't use cookies for analytics. If your browser sends Global Privacy Control or Do Not Track, no events are sent.

Logs and security

Our servers keep technical logs (request route, status code, duration, job identifier) for operating and securing the service. Logs never contain file contents, file names or passwords.

To suggest a language, our server reads the country that Cloudflare derives from your IP address and shows it only to your browser. It is not stored or logged.

Third parties

We don't sell data. The site is hosted on a virtual server operated by our hosting provider in Europe and delivered through Cloudflare, which adds its cookie-less Web Analytics script to count page views and load times.

The blog, pricing and legal pages show ads from Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other websites. You can turn off personalised ads in Google's Ads Settings (adssettings.google.com); policies.google.com/technologies/partner-sites explains how Google uses this data.

Ads never run on the home page, the tool pages or the workspace, where you open files: moving to those pages loads them fresh, without any ad code. Every other font and script is served from our own domain.

Your choices and rights

Because we don't create accounts or keep your documents, there is usually nothing personal for us to return or delete beyond the short-lived job records described above. You can delete a server job at any time from the result screen, and you can contact us with any privacy question or request.