Privacy Policy

Last updated: October 24, 2026

1. Who we are

PDFYork ("we", "our", "us") operates the website pdfyork.com and its online PDF tools. This policy explains what information we handle when you use the website, create an account or buy credits. You can reach us through the contact page.

2. Your files

How a file is handled depends on the tool. Every tool page shows this in its "Before you start" box.

2.1 Browser-based tools

Most tools, including merging, splitting, compressing, rotating, converting images and encrypting PDFs, run entirely in your browser using JavaScript and WebAssembly. The file is read and processed on your device and is not uploaded to us. When you use these tools, we only record that a task took place (see section 3.2).

2.2 Server-based tools

The following tools upload your file to our server, because they need software that cannot run in a browser: Word to PDF, RTF to PDF, Excel to PDF, PowerPoint to PDF, PDF to Word, PDF to Excel, PDF to PowerPoint and Edit PDF. Files are sent over an encrypted HTTPS connection.

• For conversions, the uploaded file is converted in a temporary folder that is removed after conversion, and the result is stored in a folder linked to your account so you can download it. Stored results are set to be deleted about 30 minutes after processing.
• For Edit PDF, the document is stored on our server for the editing session. Editing session files are not currently deleted automatically; contact us if you want a file removed.

2.3 Tools that upload the finished file

OCR PDF and Sign PDF process your document in the browser. When you save, the finished file is uploaded to our server so it can be downloaded and counted against your daily allowance. These copies are also set to be deleted about 30 minutes after processing.

We do not open, read, sell or share the content of your files, and we do not use them to train software. Staff do not review uploaded files except where needed to investigate a technical fault you report to us.

3. Information we collect

3.1 Account information

If you create an account we store your email address, your name if you provide it, and a password that is stored only as a bcrypt hash. If you sign in with Google, we receive your name, email address and profile image from Google. We send verification codes and account emails through our email provider.

3.2 Usage and credit records

To enforce daily limits and credits we record which tool was used, when, a task identifier, your daily task counters, and credit purchases, deductions and referral rewards. These records do not contain file contents.

3.3 Visitors who are not signed in

To apply the daily limit for visitors without an account, we set a random device identifier in a cookie and store the number of tasks used today against it.

3.4 Payments

Credit packs are sold through Lemon Squeezy, which processes the payment. We receive the order details needed to add credits to your account, such as the pack purchased and the amount paid. We do not receive or store your card number.

3.5 Messages you send us

When you use the contact form, we store your name, email address and message so we can reply.

4. Cookies and local storage

• Session cookie: keeps you signed in.
• device_id: a random identifier used to count daily tasks for visitors who are not signed in (kept for up to one year).
• referral_code: remembers a referral link you followed so the referrer can be credited (kept for up to 60 days).
• Language preference: your chosen interface language may be remembered in a cookie.
• Local storage: recent tool history and saved projects are kept in your browser's local storage or IndexedDB and are not sent to us.
• Third-party cookies: set by the analytics and advertising services described in section 5.

See the cookie policy for more detail.

5. Third-party services

• Google Tag Manager loads measurement tags that help us understand how the website is used.
• Microsoft Clarity records how visitors interact with pages (clicks, scrolling and session replays) to help us find usability problems. Clarity does not receive the content of files processed in your browser.
• Google AdSense may show advertising. Google and its partners use cookies to serve ads based on your previous visits to this and other websites. You can opt out of personalised advertising in Google Ads Settings. Information about how Google uses data is available at policies.google.com/technologies/partner-sites.
• Google Sign-In if you choose to sign in with a Google account.
• Lemon Squeezy for payments.
• Resend for sending account and verification emails.

These providers process data under their own privacy policies. We do not sell your personal information.

6. How long we keep information

• Files on our server: about 30 minutes after processing for conversions, OCR and Sign PDF. Edit PDF session files are not currently deleted automatically.
• Account, usage and credit records: for as long as your account exists, and afterwards where needed for accounting or legal obligations.
• Contact messages: as long as needed to handle your request.

7. Security

Connections to pdfyork.com use HTTPS. Passwords are stored as one-way hashes. No online service can guarantee absolute security, so for highly sensitive documents we recommend the browser-based tools, which keep files on your device.

8. Your choices and rights

You can ask us to access, correct or delete your account information by contacting us. Depending on where you live, you may have additional rights, such as objecting to certain processing or complaining to a data protection authority. You can block or delete cookies in your browser settings; some features, such as the daily allowance for visitors without an account, need cookies to work.

9. Children

PDFYork is not directed at children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We will update this page when our tools or services change how information is handled, and change the "Last updated" date above.

11. Contact

Questions about this policy can be sent through our contact page.