Privacy Policy

Overview

Client Side PDF ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our website and services at clientsidepdf.com (the "Service").

The most important thing to understand: Client Side PDF processes all PDF files directly in your web browser. Your files are never uploaded to our servers, and we have no access to them.

This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. We believe in transparency and want you to understand exactly how we protect your privacy.

Data Controller Information

For the purposes of the General Data Protection Regulation (GDPR), the data controller is:

Information We Collect

PDF Files and Document Data

We do NOT collect, store, or have access to any PDF files you process using our Service. All file processing occurs entirely within your web browser using JavaScript. Your files never leave your device and are never transmitted to our servers.

Automatically Collected Information

When you visit our website, we may collect certain information automatically, including:

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, and access times
• Usage Data: Features used, processing statistics (file count, not content), and interaction with our Service
• Device Information: Device type, screen resolution, and browser capabilities

Information You Provide

We collect information you voluntarily provide when you:

• Subscribe to our newsletter (email address only)
• Contact us for support (email address and any information you include)
• Participate in surveys or provide feedback

Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you subscribe to our newsletter or agree to cookies
• Legitimate Interests: To improve our Service, ensure security, and prevent fraud
• Legal Obligations: To comply with applicable laws and regulations
• Performance of Contract: To provide you with our Service and support

You have the right to withdraw consent at any time where we rely on consent as the legal basis for processing.

How We Use Your Information

We use the limited information we collect for the following purposes:

• Service Provision: To provide and maintain our PDF processing tools
• Communication: To respond to your inquiries and send requested newsletters
• Improvement: To understand usage patterns and improve our Service
• Security: To detect and prevent technical issues or abuse
• Legal Compliance: To comply with legal obligations

We do NOT:

• Sell your personal information
• Share your data with third parties for marketing
• Use your data for automated decision-making or profiling
• Access or store your PDF files

Data Sharing and Disclosure

We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist us in operating our website (e.g., hosting providers, analytics services) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

All third-party service providers are carefully selected and required to maintain appropriate security measures.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing your personal data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption: SSL/TLS encryption for all data transmission
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: Security patches and software updates
• Incident Response: Procedures for detecting and responding to data breaches

Your PDF Security: Since all PDF processing happens in your browser, your files benefit from your device's security measures and never traverse the internet to reach our servers.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but commit to using industry-standard measures.

Cookies and Tracking Technologies

We use minimal cookies and privacy-first analytics to improve your experience. Here's how:

For more details, see our Cookie Policy.

You can control cookies through your browser settings or our cookie preferences. Disabling cookies may limit some features of our Service.

Children's Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].

AI Disclosure and Transparency

What This Means for You

The use of AI in creating our website and documentation does not affect:

• The privacy protections we provide
• Our commitment to data security
• The browser-based nature of our PDF processing
• Your rights under GDPR and other privacy laws

Human Oversight

While AI assisted in the creation process, all content has been reviewed and approved by humans to ensure accuracy, compliance with regulations, and alignment with our privacy commitments. The legal obligations and privacy protections described in this policy are binding regardless of how the policy was drafted.

No AI Processing of Your Data

Important: We do not use AI or machine learning to process your personal data or PDF files. All PDF processing happens locally in your browser using traditional JavaScript code, not AI algorithms.

Authentication & Account Data

Client Side PDF Pro uses Hanko (hanko.io) as our authentication provider. Hanko is a GDPR-compliant, EU-based authentication service that enables secure, passwordless login.

Data Processed by Hanko

When you create an account or sign in, the following data is processed by Hanko:

• Email Address: Used for account identification and verification codes
• Passkey Credentials: If you use passkey/biometric login, cryptographic credentials are stored securely
• Session Tokens: Temporary tokens to maintain your logged-in state
• Login Timestamps: For security monitoring and audit purposes

Where Authentication Data is Stored

All authentication data is processed and stored by Hanko on servers located in the European Union. Hanko is fully GDPR compliant and does not share your data with third parties for marketing purposes.

Your Rights Regarding Authentication Data

You can:

• Access your account settings and manage passkeys through the Profile menu
• Delete your account at any time, which removes all authentication data
• Request a copy of your authentication data by contacting us

Hanko Privacy Policy

For complete details on how Hanko handles your data, please review Hanko's Privacy Policy.

Open Source Software Acknowledgements

Client Side PDF is built using open source software. We gratefully acknowledge the following projects and their contributors:

Core Libraries

• PDF.js (pdfjs-dist) — Mozilla's PDF rendering library. Licensed under Apache License 2.0. github.com/nicolo-ribaudo/nicolo-ribaudo.github.io
• Tesseract.js — OCR engine for text recognition. Licensed under Apache License 2.0. github.com/nicolo-ribaudo/nicolo-ribaudo.github.io
• SheetJS (xlsx) — Spreadsheet data parser and writer for Excel export. Licensed under Apache License 2.0. sheetjs.com
• QPDF — PDF transformation library compiled to WebAssembly. Licensed under Apache License 2.0. github.com/nicolo-ribaudo/nicolo-ribaudo.github.io

AI Processing (Pro Features)

• WebLLM (@mlc-ai/web-llm) — Browser-based large language model inference by MLC AI. Licensed under Apache License 2.0. github.com/nicolo-ribaudo/nicolo-ribaudo.github.io
• Mistral AI Models — EU-based AI models available under Apache License 2.0. mistral.ai
• Llama Models — Meta's open-weight models. Licensed under Llama Community License. ai.meta.com/llama
• Phi Models — Microsoft's small language models. Licensed under MIT License. github.com/nicolo-ribaudo/nicolo-ribaudo.github.io

Build Tools & Fonts

• Vite — Frontend build tool. Licensed under MIT License. vitejs.dev
• Inter — UI typeface by Rasmus Andersson. Licensed under SIL Open Font License 1.1. rsms.me/inter
• Lexend — Typeface designed for reading. Licensed under SIL Open Font License 1.1. lexend.com

License Compliance

All open source components are used in compliance with their respective licenses. Full license texts are available in the source code repository. If you believe we have inadvertently omitted an attribution or have questions about our use of open source software, please contact us at the address provided below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For material changes, we will provide additional notice (such as a banner on our website or email notification).

We encourage you to review this Privacy Policy periodically. Your continued use of our Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: