Privacy Policy

PDFteka processes your documents inside your own browser, so they are never sent to us. This page explains what that means in practice, the small amount of technical data a web server unavoidably records, and what you can ask us to do about it.

Who is responsible for this site

PDFteka is operated by a company registered in Dubai, United Arab Emirates. If you need the full legal entity details — registered name, number and address — write to info@pdfteka.com and we will send them to you.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the operator of PDFteka is the data controller for the limited personal data described here. About PDFteka explains in plain language how the tools work without a file ever reaching us. You can reach us about anything on this page at info@pdfteka.com.

This policy covers the website at pdfteka.com and every tool on it. It does not cover other websites you may reach from links here.

The short version

Your documents are opened, changed and saved by your own browser. They are not uploaded to us, not stored by us and not seen by us — not temporarily, not in a queue, not even the file names.

That is not a promise about our internal procedures. It is how the site is built: our server sends you a page and some JavaScript, and after that your device does the work.

What we cannot say is that we collect no data at all, because that would be untrue. Like every website, we run on a web server, and a web server records the basic technical details of each request it answers. Those records are described below, and they are the only personal data we routinely handle.

What happens to the files you open

When you choose a file, your browser hands it to the page as data in memory. The PDF is parsed, edited and rebuilt there, and the finished file is written straight to your downloads folder. No part of that involves a request to our server.

As a result we never receive the contents of your document, its file name, its size, its metadata, or any record that you processed it at all. There is nothing on our side to leak, to hand over, to sell, or to lose in a breach — and nothing for us to delete when you ask.

You do not have to take our word for it. Open your browser's developer tools, switch to the Network tab and run any tool: you will see no upload. Or load a page, disconnect from the internet, and carry on working — every tool except text recognition keeps functioning.

What we do not collect

There are no user accounts on PDFteka, so we do not ask for or hold an email address, a name, a password or a payment method. There is no sign-up, no newsletter and no login.

We set no cookies of our own. We use no tracking pixels, no fingerprinting, no session recording and no advertising identifiers. We do not build profiles of visitors and we do not share data with data brokers or ad networks.

At the time this policy was written, no analytics code and no advertising code runs on the site at all. Both are covered by their own sections below, because both may change and we would rather write the rules down in advance.

Technical data our web server records

Serving a web page means receiving a request from your device, and that request necessarily carries technical information. Our hosting provider writes it to standard server logs: your IP address, the date and time, the address of the page or file requested, the HTTP status and size of the response, your browser's user-agent string, and the referring page where your browser sends one.

We use these logs only to deliver the site, to investigate errors and to detect and stop abuse such as attacks or automated scraping. We do not use them to identify individuals, to profile visitors, or for marketing of any kind.

The legal basis is our legitimate interest in running a secure and functioning website (Article 6(1)(f) GDPR). Our hosting provider keeps these logs only briefly — days rather than months — after which they are deleted or overwritten. We do not copy them elsewhere and we do not combine them with any other source of data.

Third-party resources your browser may load

Almost everything the site needs — the PDF engine, the editor, the fonts — is served from our own domain. There are two exceptions, and we would rather be specific about them than vague.

The text recognition tool at /ocr-pdf/ downloads the recognition library and its trained language data from public content delivery networks (currently jsDelivr and the Tesseract project's data host) the first time you run it. These files are several megabytes each and your browser caches them for later. Your document is never part of that download: the connection is used to fetch the recognizer, not to send anything.

Some tools embed the DejaVu Sans font so that accented and non-Latin characters come out correctly in the finished PDF. The font is served from our own domain, and only if that copy fails to load does the browser fall back to the same public CDN.

In both cases the CDN operator sees what any web server sees when a browser asks it for a file: your IP address, your user-agent string, the name of the file requested and the time. It does not receive your document, and it cannot: the document never leaves your device. If you would rather avoid third-party requests entirely, do not use the OCR tool — every other tool works without contacting anyone but us.

Data stored in your browser

If you build or upload a stamp and save it to My stamps, it is stored in your browser's localStorage, on your own device. It is not sent to us, and we have no way to read it.

You stay in control of it. Delete individual stamps from the My stamps tab, or clear site data for pdfteka.com in your browser settings to remove everything at once. Clearing your browsing data removes it too, and it never follows you to another browser, another profile or another device.

Analytics — currently none

As this policy is published, PDFteka runs no analytics of any kind: no visit counter, no session recording, no heat maps, no A/B testing scripts.

If we enable analytics later, we intend to use a privacy-friendly service that does not set cookies, does not track you across other websites and receives nothing about your files. We will name the provider in this policy and change the date at the bottom before or at the time it goes live.

Nothing about the way your documents are handled would change. Analytics can only ever see that a page was viewed; it cannot reach a file that exists solely in your browser's memory.

Advertising — currently none

There is no advertising on PDFteka today. No ad network code is loaded and no advertising cookies are set.

If we introduce advertising in future, we expect it to be Google AdSense. Before any personalised advertising or advertising cookies are used for visitors in the European Economic Area, the United Kingdom or Switzerland, we will show a consent banner that asks for your permission, that makes refusing as easy as accepting, and that lets you change your decision later. If you refuse, you may still see non-personalised ads, which are not based on a profile of you.

Where advertising is enabled, Google collects data through its own ad tags and acts as an independent controller for it under its own privacy policy. We will update this section with the specifics — including how to withdraw consent and which cookies are involved — before any ad appears on the site.

Advertising would never involve your documents. Ad code cannot reach the file you are working on, for the same reason we cannot: it is only ever in your browser's memory.

Sending data outside the EEA and the UK

Our company is based in the United Arab Emirates, and our hosting and CDN providers operate servers in several countries. The limited technical data described above — essentially connection records — may therefore be processed outside the European Economic Area and the United Kingdom.

The UAE is not covered by an EU or UK adequacy decision. Where a transfer of personal data requires safeguards, we rely on the data protection terms offered by the providers we use, including standard contractual clauses where those are available.

Your documents are unaffected by any of this, because they are never transferred anywhere in the first place.

Your rights

If the GDPR or UK GDPR applies to you, you have the right to ask for access to your personal data, to have it corrected or erased, to have processing restricted, to object to processing based on legitimate interests, and to receive your data in a portable format. Write to info@pdfteka.com to exercise any of them.

It is fair to warn you how little there is to act on. The only personal data we hold is server log entries keyed to an IP address, and we cannot identify a person from those. Article 11 GDPR does not require us to gather extra information simply to be able to. If you want us to search for entries relating to you, tell us the IP address you used and the approximate date and time, and we will look.

You also have the right to complain to a supervisory authority: in the EEA, the data protection authority of the country where you live, work, or where the issue arose; in the United Kingdom, the Information Commissioner's Office. You are not obliged to contact us first, though we would welcome the chance to put a problem right.

Children

PDFteka is a general-purpose utility rather than a service aimed at children. It has no accounts, no profiles, no messaging and no social features.

We do not knowingly collect personal data from children. Because there is no sign-up and no file ever reaches us, a child using the site leaves no more trace with us than any other visitor: a line in a server log. If you believe a child's personal data has somehow reached us, write to info@pdfteka.com and we will investigate.

Security

The site is served over HTTPS, so the pages and scripts you receive cannot be read or altered in transit. It is a static site with no user database and no store of documents, which removes the most valuable target an attacker would otherwise have.

Keeping the file on your device also puts part of the responsibility there. A shared or public computer keeps whatever you saved onto it, so remove downloaded files when you have finished. No system is completely secure, and we do not claim ours is; we also make no claim to hold any security certification.

Changes to this policy

We will update this page whenever the way the site works changes — in particular before enabling analytics or advertising, and if our hosting arrangements change in a way that affects the description above.

The date below always shows the current version. Where a change materially affects your privacy, we will make it visible on the site rather than quietly editing the text.

Last updated: 2026-08-16. Questions about this policy go to info@pdfteka.com.