Privacy Policy
Short version: your documents are processed on your own device and never reach us. We do not use analytics, advertising or tracking cookies. The long version explains exactly what does and does not happen.
1. Who this covers
This policy describes how the ZappoPDF website (“ZappoPDF”, “we”, “us”) handles information when you visit it or use any of its tools. It applies to the website only. It does not cover any third-party website you reach by following a link from here.
2. Your documents
We never receive the files you work on. This is not a policy commitment layered on top of a normal upload service; it is how the site is built. ZappoPDF is a static website with no file-processing backend.
When you use a tool:
- Your browser reads the file from your disk into its own memory using the standard File API.
- All processing — merging, splitting, rendering, compressing, stamping — happens in that browser tab, using JavaScript running on your device.
- The finished file is created in memory and saved through your browser’s normal download mechanism.
- When you close or reload the tab, everything from that session is discarded.
At no point is your document, its contents, its file name or its size transmitted to us or to anyone else. We hold no copy, so there is nothing for us to retain, share, sell, analyse, use for training, hand over under legal process, or lose in a breach.
You can verify this yourself. Open your browser’s developer tools, switch to the Network tab, and run any tool. You will see the page and its libraries load, and then nothing further. You can also disconnect from the internet after the page has loaded and keep working.
3. What we collect
We do not operate accounts, logins, profiles or newsletters, and we run no analytics or advertising scripts. Specifically, ZappoPDF does not:
- set advertising, analytics or tracking cookies of any kind;
- embed Google Analytics, Meta Pixel, or any comparable measurement tool;
- build a profile of you, fingerprint your device, or track you across other websites;
- ask for your name, email address or payment details in order to use a tool;
- sell, rent or share personal information with third parties, because we do not hold any.
Our web host may keep short-lived technical server logs (IP address, timestamp, requested page, user agent) for the ordinary purposes of serving the site, diagnosing faults and preventing abuse. These logs concern page requests, never file contents, and we do not use them to identify individuals.
4. Data stored on your device
We use one item of browser storage, and it never leaves your machine:
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
| zappopdf:theme | localStorage | Remembers whether you chose the light or dark theme. | Until you clear your browser data. |
That is the complete list. Because we set no cookies and no tracking storage, you will not see a cookie consent banner here — there is nothing to consent to. You can clear the entry at any time through your browser’s “clear site data” controls; the site will simply follow your operating system’s light or dark preference again.
5. Third parties we rely on
In the interest of being complete rather than flattering, there are three external requests your browser makes when loading ZappoPDF, and one more only if you submit the contact form. None of them carry your documents, and none of them are analytics:
| Provider | What is requested | What they can see |
|---|---|---|
| jsDelivr (open-source CDN) | The pdf-lib, PDF.js and JSZip libraries that power the tools. | That an IP address requested a common JavaScript library. Not which tool you used, and never your file. |
| Google Fonts | The Inter typeface used across the site. | That an IP address requested a font file. Nothing about your documents. |
| Web3Forms | Only the contact form, and only when you press send — never on page load. | The name, email address, topic and message you typed into that form. Never your documents. |
| Our web host | The HTML, CSS and JavaScript of the page itself. | Standard server-log information as described in section 3. |
If your organisation needs zero external requests, ZappoPDF can be self-hosted with the libraries and font served locally. Write to us and we will point you at the changes required.
6. If you contact us
The form on the contact page is the one part of this site that deliberately sends something to a server. When you press send, the name, email address, topic and message you typed are posted to Web3Forms, a form-delivery service that forwards them to our inbox. For that data we are the controller and Web3Forms acts as our processor. Their privacy policy is at web3forms.com/privacy; in summary, they hold submissions encrypted at rest on AWS and delete them automatically after at most three years, and because they operate from India, transfers of EEA, UK or Swiss personal data are made under Standard Contractual Clauses.
Your documents are never part of this. The form has no file upload, and nothing you have opened in a tool is attached to it. We use what you write solely to answer you, keep it only as long as the conversation is useful, and never add it to a mailing list. Please do not paste confidential document contents into the form; we do not need them to diagnose a problem, and sending them would defeat the point of using this site.
7. Legal bases and your rights
Where the UK GDPR, EU GDPR or a comparable regime applies, our lawful basis for the limited processing above is our legitimate interest in operating a functioning, secure website and in replying to people who contact us.
You have the right to request access to, correction of, or deletion of personal data we hold about you, to object to or restrict processing, and to lodge a complaint with your data protection authority. In practice the only personal data we are ever likely to hold is a message you sent through the contact form, or an email conversation you started. Because we hold no accounts and no documents, most requests can be answered immediately and in full. Write to us through the contact page.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have no personal information to sell.
8. Children
ZappoPDF is a general-purpose utility and is not directed at children under 13. We do not knowingly collect personal information from anyone, children included.
9. Changes to this policy
If this policy changes, the date at the top of the page changes with it. Any change that would weaken the core commitment in section 2 — that your files are never uploaded — would be a fundamental change to what ZappoPDF is, and we would say so prominently on the home page rather than quietly editing this text.
10. Contacting us
Privacy questions, data requests and security disclosures: use the contact page and choose the privacy topic. Anything else goes through the same form.
This document explains our practices in plain language. It is not legal advice, and if you need a formal data processing agreement for organisational use, get in touch and we will discuss it.