Privacy Policy

1. Who we are

HerePDF (herepdf.app) is a free, browser-based PDF toolkit. All PDF processing happens locally in your browser - no files are ever uploaded to our servers.

2. Data we do not collect

We never receive, store, or process any PDF files, images, or documents you work with. Every tool on the site runs entirely on your device using JavaScript - including the signatures you draw, type, or upload and the answers you type into a form. Nothing leaves your browser, and signatures are not saved anywhere, not even in your browser's storage. The only personal information we ever receive is what you choose to type into the contact form (section 8).

3. Analytics

We use Vercel Analytics, Vercel Speed Insights and Cloudflare Web Analytics to collect anonymous, aggregated page-view data (pages visited, country, browser type, page load performance). None of them sets cookies or stores anything in your browser, and the data contains no personally identifiable information. It is used only to understand how the site is used. Their privacy practices are described at vercel.com/legal/privacy-policy and cloudflare.com/privacypolicy.

4. Advertising

We use Google AdSense to display advertisements on the site. Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie) to serve ads based on your visit to this site and other sites on the internet.

You may opt out of personalised advertising by visiting Google Ads Settings or AboutAds.info.

Google's use of advertising cookies is governed by the Google Advertising Privacy & Terms.

5. Cookies

We use the following cookies and local storage values:

• herepdf_cookie_consent - stores your cookie consent preference.
• Google / DoubleClick cookies - set by Google AdSense for advertising purposes (only if you accept cookies).
• hCaptcha cookies - only if you press "Start the spam check" on the contact form. hCaptcha describes the cookies it sets as strictly necessary for the check: for example hmt_id (anonymous service statistics, 30 days) and load-balancing and security cookies (up to a day). Nothing from hCaptcha is loaded on any other page.

Offline copy. To let the tools work without a connection, HerePDF keeps copies of its own pages and code in your browser's storage (the Cache Storage, which is not a cookie). Your PDFs are never part of that: they are processed in memory and discarded. You can remove the copy at any time by clearing this site's data in your browser settings.

6. Your rights (GDPR / CCPA)

We do not collect personal data when you use the tools, so we hold no records about your use of them. The one exception is a message you send through the contact form (section 8): we hold the name (if you gave one), the email address and the message in our email inbox so that we can reply, and we delete it after at most 90 days. You can ask us at any time to show you, correct or delete it, using the contact form, and we will. For data held by Google in relation to advertising, use the opt-out links in section 4 above. If you are in the EU, the UK or Switzerland you also have the right to complain to your local data protection authority.

California residents may opt out of the "sale" of personal information via Google's opt-out tools linked above.

7. Changes to this policy

We may update this policy when we add new features or third-party integrations. The "last updated" date at the top of this page reflects the most recent revision.

8. Contact

Questions about this policy? Contact us.

The contact form. Using it is optional, and none of the tools needs it. If you send a message, the name (optional), email address and message you type are sent from your browser to Web3Forms, a form-delivery service, which emails them to us. Nothing is sent until you press Send, and nothing from your documents is ever part of it. We use the message only to reply to you, our legal basis is our legitimate interest in answering people who write to us, and we keep it for up to 90 days and then delete it from our inbox. Web3Forms and hCaptcha are based outside the EU and the UK and may process data in other countries, including the United States. See Web3Forms' own policy for how long it keeps messages.

The spam check. To keep automated spam out of the contact form, Web3Forms uses hCaptcha, a service of Intuition Machines, Inc. in the United States. It is loaded only when you press "Start the spam check" on the contact form: never on any other page, and not when the form is merely opened. To tell people from bots, hCaptcha uses information such as your IP address, browser and device details, and mouse, touch and keyboard activity on the page, and it sets the cookies listed in section 5. Our legal basis is our legitimate interest in protecting the form from spam. See the hCaptcha Privacy Policy.