Privacy Policy

Last updated: April 3, 2026  ·  Effective date: April 3, 2026

Your privacy is critically important to us. FlexyPdf is built with a privacy-first philosophy — the majority of our tools run entirely within your browser, meaning your files never leave your device. This policy explains exactly what data we collect, why we collect it, and how you can control it.

1. Information We Collect

We collect minimal information and only what is necessary to operate and improve FlexyPdf. We never sell your personal information to any third party.

a) Automatically Collected Information

When you visit FlexyPdf, our web servers and analytics services may automatically collect:

  • Log data: IP address (anonymized), browser type and version, operating system, referring URL, pages visited, time and date of visit.
  • Device information: Screen resolution, device type (desktop, tablet, mobile), and language preference.
  • Usage data: Which tools are used and how frequently. This data is anonymous and aggregated — it does not identify individual users.

b) Information You Provide Voluntarily

  • Contact form submissions: Your name, email address, and message. Submitted via Web3Forms, a third-party form handling service. Data is used solely to respond to your inquiry and is processed according to Web3Forms' privacy policy.
  • Files and documents: Files you process using our tools (see Section 4 for our full file processing policy).

c) Information We Do NOT Collect

  • We do not require account creation or user registration.
  • We do not collect payment information.
  • We do not collect your name or contact details unless you voluntarily reach out.
  • We do not build personal profiles of our users.

2. How We Use Your Information

We use the information we collect for these purposes:

  • To provide and operate our tools — enabling the core functionality of FlexyPdf.
  • To improve the user experience — analyzing usage patterns to improve tools and add new features.
  • To respond to your inquiries — using contact form data to reply to support requests and feedback.
  • To display advertisements — via Google AdSense, which helps fund the free operation of FlexyPdf.
  • To ensure security — detecting and preventing abuse, fraud, or malicious activity.
  • To comply with legal obligations — responding to lawful requests from authorities where required.

We do not use your data for unsolicited marketing, profiling, or selling to third parties.


3. Cookies & Local Storage

a) Local Storage (Browser Storage)

FlexyPdf uses your browser's localStorage to save your display preference (light/dark mode) and your cookie consent choice. This data is stored entirely on your device and is never transmitted to our servers. Clear it any time via your browser settings.

b) Essential Cookies

We may use essential session cookies strictly necessary for the website to function. These do not collect personal information and cannot be disabled without impacting site functionality.

c) Analytics Cookies (Google Analytics)

We use Google Analytics to collect anonymous data about website traffic. Google Analytics uses cookies to track page views, session duration, and traffic sources. All data is anonymized — IP addresses are truncated and individual users are not identified. You can opt out via the Google Analytics Opt-out Browser Add-on.

d) Advertising Cookies (Google AdSense)

We display advertisements via Google AdSense. Google AdSense uses cookies — including the DoubleClick DART cookie — to serve ads based on your browsing history and interests across websites. Opt out of personalized advertising:

e) Managing Cookies in Your Browser

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Privacy, search, and services → Cookies

4. File Processing Policy

a) Browser-Based Processing (Majority of Tools)

Your files never leave your device. Processing happens locally in your browser using WebAssembly, JavaScript, and Canvas APIs. No file data is transmitted to our servers.

This covers the vast majority of our tools: PDF editors, image converters, file compressors, developer tools, text utilities, calculators, and more.

b) Server-Side Processing (Select Tools)

A small number of tools require server-side processing for operations that cannot be performed in the browser. For these tools:

  • Files are transmitted over an encrypted HTTPS/TLS connection.
  • Files are stored in secure, isolated temporary server storage.
  • Files are automatically and permanently deleted within 5 minutes of processing completion.
  • File contents are never shared with third parties.
  • File contents are not read, analyzed, or used beyond the requested operation.
  • No backups of user-uploaded files are retained.

We recommend keeping backup copies of important files before using any processing tool.

c) Compiler & Code Execution Tools

Our online compiler tools allow you to write and run code in various programming languages. For these tools:

  • Code is executed in isolated Docker containers with strict resource limits (memory, CPU, and time).
  • Each execution runs in a sandboxed environment with no access to external networks or persistent storage.
  • Code and output are not stored or logged — they are deleted immediately after execution completes.
  • We do not review, analyze, or retain any code you submit for execution.

5. Google Services & Advertising

Google AdSense

FlexyPdf participates in the Google AdSense advertising program to fund our free platform. As part of this:

  • Google uses cookies and web beacons to serve ads based on your browsing history.
  • Google's use of the DART cookie enables interest-based advertising.
  • Ads may be targeted based on your interests, demographics, or prior site visits.

Opt out via Google Ads Settings. Learn more at Google's Privacy & Terms.

Google Analytics

We use Google Analytics to analyze website traffic. It collects anonymized data: page views, session duration, device type, and geographic region. IP addresses are anonymized. Data is used exclusively to improve FlexyPdf and is never used to identify individual users.

Google Fonts

We use Next.js Font Optimization to self-host our fonts (Poppins and Comfortaa) directly from our own servers. No requests are made to Google's font servers when you visit FlexyPdf, so no IP addresses or browsing data are shared with Google through font loading.


6. Third-Party Services

The following third-party services may be used on FlexyPdf. Each has its own privacy policy governing their data practices:

ServicePurposePrivacy Policy
Google AnalyticsAnonymous traffic analysisView Policy
Google AdSenseAdvertising revenueView Policy
Web3FormsContact form submission handlingView Policy
Cloudflare CDNHosting PDF.js library for PDF toolsView Policy
UnsplashStock images on blog pagesView Policy
ExchangeRate-APILive currency exchange rates (Currency Converter tool)View Policy
Google DNSDNS record lookups (DNS Lookup tool)View Policy
ip-api.comIP geolocation data (IP Lookup tool)View Policy
API-NinjasDomain WHOIS lookups (WHOIS tool)View Policy

FlexyPdf may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.


7. Data Retention

  • Browser-processed files: Never transmitted to or stored on our servers. Zero server-side retention.
  • Server-processed files: Automatically deleted within 5 minutes of processing. No backups retained.
  • Contact form data: Retained for up to 12 months for support purposes, then permanently deleted.
  • Server access logs: Anonymized logs retained up to 90 days for security monitoring, then deleted.
  • Analytics data: Aggregated, anonymized data retained per Google Analytics settings (up to 14 months).
  • LocalStorage (theme preference): Stored on your device until you clear your browser data.

8. Data Security

We implement industry-standard security measures:

  • HTTPS / TLS encryption: All data transmitted between your browser and our servers is encrypted.
  • Privacy by design: Most tools never transmit files to any server, providing maximum security.
  • Isolated temporary storage: Server-processed files are in isolated, access-controlled storage with automatic deletion.
  • No persistent file databases: We do not maintain databases of user-uploaded files.
  • Regular security reviews: We regularly audit and update our security practices.

While we strive to protect your information using commercially acceptable means, no internet transmission is 100% secure. For security concerns, contact us at support@flexypdf.com.


9. Your Rights Under GDPR (EU/EEA Users)

If you are located in the EU or EEA, the General Data Protection Regulation (GDPR) grants you these rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Right to Restrict Processing: Request restriction on how we process your data.
  • Right to Data Portability: Request your data in a portable, machine-readable format.
  • Right to Object: Object to processing of your personal data.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.

Our legal basis for processing: legitimate interest (analytics and security) and consent (advertising cookies). Since we collect minimal personal data and process most files locally in your browser, exercising these rights typically results in us confirming we hold no personal data about you.

To exercise your rights, contact support@flexypdf.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority.


10. Your Rights Under CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you:

  • Right to Know: Know what personal information we collect, use, and disclose.
  • Right to Delete: Request deletion of personal information we have collected.
  • Right to Opt Out: Opt out of the sale of personal information.
  • Right to Non-Discrimination: Not receive discriminatory treatment for exercising CCPA rights.

We do not sell your personal information to third parties. To exercise your California privacy rights, contact support@flexypdf.com.


11. Children's Privacy

FlexyPdf is not directed at children under the age of 13 (or under 16 in certain EU jurisdictions). We do not knowingly collect, use, or disclose personal information from children under 13.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@flexypdf.com.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we may provide more prominent notice. Your continued use of FlexyPdf after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.


13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

We aim to respond to all privacy inquiries within 5 business days and GDPR-related requests within 30 days as required by law.