Privacy Policy

Our Commitment to Privacy

PDFLite is built on a simple principle: your files never leave your device. All processing happens in your browser. We do not upload, store, or access your files.

1. What We Don't Collect

PDFLite does not collect:

• Your files (they stay in your browser only)
• Your personal identity (email, name, IP address)
• Personally identifiable information (PII)
• Metadata from your files
• Content of any documents you process

2. Free-Tier Usage Limits

To keep the free tier free, we count how many actions you have run today. That count never leaves your device, and we have no server to send it to.

• Where it is stored: localStorage, a first-party cookie, and IndexedDB — three places, so that a browser clearing one of them does not silently reset your limit
• Browser hash: a one-way hash of a few browser properties (user agent, language, colour depth, screen size, time zone, CPU core count) to tell your browser apart from a different one on the same machine
• What is never included: your name, email, IP address, file names, file contents, or anything drawn from your documents

We do not use canvas fingerprinting or any other technique designed to identify you across sites. The hash stays on your device and is never transmitted.

We treat this storage as functionally necessary: without it there is no way to offer a free tier at all. It is never used for advertising, profiling, or analytics. If you clear your browser storage, the count resets — we accept that, because the alternative is tracking you more closely than we are willing to.

Premium users: no counting at all — there is no limit to enforce.

Saved signature (Premium, optional): if you choose "Save this signature for next time", an image of your signature is kept in this browser's localStorage so it is ready on your next visit. It is never uploaded. Remove it at any time with "Delete" in the Sign tool, or by clearing this site's data in your browser.

3. Analytics

We use PostHog, hosted in the European Union, to see which pages people find useful and where our tools confuse them. We run it in a deliberately limited configuration:

• Nothing is stored on your device. PostHog runs in memory-only mode — no analytics cookies, no localStorage entries. Close the tab and nothing of it remains
• No session recording. We never record your screen or your actions on the page
• No automatic capture. We record only a short list of events we chose by hand: which tool you opened, that an action completed, that you hit a free-tier limit, that you opened the upgrade window
• No file information. File names, sizes, and contents are never sent. The events carry the name of the tool and nothing drawn from your documents
• Your data stays in the EU and is not used to build a profile of you across sites

Because nothing is written to or read from your device, this does not require a consent banner. See PostHog's privacy policy for how they process it.

4. Payment Data

PDFLite uses Lemon Squeezy for payments. Lemon Squeezy is a payment processor that handles:

• Credit card information
• Billing address
• Email (for receipts)

PDFLite does not handle or store your payment data directly. Review Lemon Squeezy's privacy policy for details.

5. Cookies & Local Storage

PDFLite writes exactly two things to your device, both first-party and both functionally necessary:

• Your free-tier usage count — see section 2. Never transmitted anywhere
• Your Premium licence key, if you have bought one — sent only to Lemon Squeezy to confirm it is valid, at most once a day

There are no advertising cookies, no third-party trackers, and no analytics storage. You can delete both at any time through your browser settings; deleting the first resets your free-tier counter, and deleting the second means re-entering your licence key.

6. GDPR & Privacy Rights

Since PDFLite does not collect personal data, GDPR's typical requirements (consent forms, data access requests, deletion) do not apply. Your data is yours alone — stored in your browser, not ours.

If you have privacy concerns or requests, contact hello@pdflite.io

7. Security Limitations

PDFLite is not a security tool. While keeping files client-side avoids third-party server risk, this does not protect against threats on your own device:

• Malware or keyloggers on your device can still access your files
• Browser cache or temp files may store remnants of processed files
• Your ISP can see that you're accessing pdflite.com (but not your files)

For highly sensitive documents, consult a security professional before processing them on any device.

8. Third-Party Services

PDFLite relies on third-party services:

• Vercel: Hosting (see Vercel's privacy policy)
• CDN providers: jsdelivr, cdnjs, cdn.sheetjs.com (for libraries)
• Lemon Squeezy: Payment processing
• PostHog (EU): Privacy-focused analytics, no device storage

These services have their own privacy policies. PDFLite is not responsible for their practices.

9. Changes to Privacy Policy

PDFLite may update this policy at any time. Major changes will be announced on the site. Your continued use indicates acceptance.

10. Contact

Privacy questions? Email hello@pdflite.io