PDFLUME / TRUST & TRANSPARENCY

Privacy policy

Your documents stay on your device. Here is what that means, and what information a website still needs to work.

Last updated: October 30, 2026

Who operates PDFLume

PDFLume is an independently operated project based in Shenzhen, China. Contact: support@pdflume.com.

Your files and conversion results

The six browser tools process selected files locally using your device’s memory. We do not upload those files, extracted text or conversion results to a server or AI service. We do not create an account or a server-side document history.

Files are held while you use the tool. Closing the tab ends that session; files you download remain on your device until you delete them. Your browser may manage its own cache or restore sessions. We cannot remotely erase downloads or guarantee deletion by your browser.

Website requests and hosting

Loading PDFLume still makes network requests for pages, scripts, fonts, illustrations and sample files. The hosting and network providers handling those requests receive technical information such as an IP address, browser information, requested URL and request time. This is separate from the contents of your documents.

Vercel hosts and delivers this website. Cloudflare provides domain name resolution and support-email forwarding. Their infrastructure may process technical information outside your country, including in the United States. We do not maintain a separate database of website access logs. Provider-held service and security data is retained under their applicable service settings and privacy policies; a dashboard log-viewing window is not a promise that all provider data is deleted. See the Vercel privacy notice and Cloudflare privacy policy.

Optional usage statistics

Usage statistics are off by default. Enable them only if you want to help us understand tool usage in privacy settings.

With your current consent, we send limited tool events to our Cloudflare-hosted service: language, tool and entry type, user-file or sample category, action, coarse duration and error category. We store daily counts in Cloudflare D1 in North America for up to 30 days, not individual event histories or visitor profiles. We do not send documents, file names, email addresses, full URLs, search terms or visitor IDs.

The service receives network information such as your IP address to deliver requests. For abuse protection only, it keeps a daily keyed IP hash and counters for up to 48 hours, separate from usage counts. Raw IP addresses are not stored in these tables. Cloudflare may separately retain service and security data under its policies, and recovery backups follow its recovery period.

This tab also keeps up to 100 local diagnostic events. Turning statistics off stops future requests, cancels pending requests and clears local history; other open tabs follow the changed preference. Combined counts contain no visitor identifiers and cannot be selectively deleted. Older local-only consent does not enable network statistics: a new explicit choice is required.

There is no retry queue or persistent visitor identifier. Blocked statistics and storage restrictions never prevent conversion. These counts describe consenting activity, not unique users or a complete conversion rate.

Cookies and browser storage

PDFLume currently sets no application cookies and loads no advertising or third-party analytics scripts. We save a privacy choice in local storage only when you ask us to remember one. Ordinary browser caching may still store downloaded site assets.

See our Cookie and storage notice for the storage inventory, retention and controls.

Messages you choose to send

Messages to support@pdflume.com are forwarded by Cloudflare Email Routing to an inbox hosted by Google Gmail. These providers process your sender address, message and attachments to deliver and store your correspondence. Unlike local file conversion, sending an email transmits its content to these services and to the project operator. Please avoid sending confidential documents.

Support messages are retained for handling your request, relevant follow-up and any applicable legal obligations. You may contact us to request deletion. Provider backups and security records follow their own retention practices. See Google’s privacy policy.

Advertising and external services

Advertising is not currently enabled. Before adding advertising or external analytics, we will update this policy with the providers, purposes, storage and relevant choices, and implement the required consent controls.

If you follow an external link or paste your output into another service, that service receives the information you choose to provide under its own policies. Local conversion does not make a later upload to an AI service private.

Desktop beta interest list

If you choose to join the Desktop beta list and check the consent box, we send your email address to our Cloudflare-hosted registration service and store it in Cloudflare D1, with the registration time, consent version and an unverified status. The database is located in North America. This is separate from browser-only file conversion: your documents are never included.

The list is used for Desktop beta availability and testing communications, not unrelated marketing. No confirmation email is currently sent, and registration does not guarantee beta access. We must verify email ownership before treating a record as a verified subscriber for batch notifications.

We keep one entry per normalized email address. Inactive entries are removed after one year by daily cleanup. Cloudflare’s recovery backups may retain deleted data for their applicable recovery period. To withdraw or request deletion earlier, email support@pdflume.com from the registered address.

To limit abuse, the registration service temporarily stores a keyed hash derived from your IP address and a request count. It does not store the raw IP address in the list or rate-limit table. These counters are removed within three days. Cloudflare may separately process network information to operate and protect its service.

Your choices and requests

You can use all tools without optional diagnostics, clear this site’s browser storage, delete downloaded results and stop using the site at any time. Depending on the law applicable to you, you may have rights to access, correct or delete personal information we hold, restrict or object to its use, withdraw consent or complain to a relevant authority. We do not hold a server copy of your locally processed documents.

Our contact page provides the available privacy-request channel. We will update this page when our practices change.