The Essentials First
Most tools on this website work entirely in your browser. Your files are not transferred to a server, stored temporarily, or analyzed. As soon as you close the page, the result is also gone from memory.
Some tools cannot be implemented in the browser, such as converting Office files, text recognition, and converting PDF to Word. In these cases, the file is transferred. Each tool page tells you before use which applies; the notice appears directly above the drop area.
We do not offer registration, use cookies for advertising or analytics, or integrate services that track your use.
Controller
Gull AG, Gotthardstrasse 14, 6300 Zug, Schweiz
Email: [email protected]
Tools That Work in Your Browser
With these tools, the selected file is processed exclusively in your device's memory. The required program logic is delivered to your browser as JavaScript code and executed there.
Your file content is never transferred to us or third parties. We therefore have no technical way to access these files.
These include: Merge, Split, Rotate, Delete Pages, Sort Pages, Image to PDF, PDF to JPG, Add Page Numbers, Watermark, Remove Password, Protect PDF, and Compress PDF.
Tools That Require a Transfer
When converting to and from Office formats, HTML to PDF, text recognition, PDF/A, repair, and editing, your file is transferred to our server through an encrypted connection.
There, it is processed in a dedicated folder and deleted immediately after processing, even if processing fails. The file is not stored in a media library or recorded in a database. Processing takes place in isolated services on the same server; these services have no internet connection and cannot be accessed externally.
“Edit PDF” is different: an editor needs the file across several steps—you browse through it, change something, view it, and change the next thing. Your file therefore remains on our server for the duration of the session. It is automatically deleted after 60 minutes of inactivity; the “Done” button deletes it immediately, as does closing the browser window.
While the session is active, a small number of backups of the most recent editing steps are kept alongside the file, solely so changes can be undone. They are deleted with the file. No data is sent to an AI service during editing.
The legal basis is Art. 6(1)(b) GDPR: processing is necessary to provide the service you requested. Without transfer, conversion would not be technically possible.
To prevent misuse, we limit the number of operations per visitor and hour. The count is per browser, based on the identifier cookie described under “Cookies,” so that multiple people in a company behind the same internet address do not use up each other's quota. As protection against circumvention, a significantly higher limit also applies per internet address. A short code is created from both the identifier and your IP address using a random value that changes daily. After the day ends, this short code can no longer be linked to any address—not even by us, because the random value is then deleted.
Tools with AI Support
With “Redact PDF” and “Summarize PDF,” your file is not transferred. It is read in your browser; only the extracted text is sent to our server.
Text recognition can also be started from other tools if a file has no text layer. For tools that already use uploads, this happens automatically with a notice; for tools without upload and AI tools, only after you consent by clicking. In both cases, the file is transferred for recognition and then deleted.
With “Website to PDF,” our server retrieves the web address you enter using a browser and converts the page into a PDF. The address is used only for this retrieval and is not stored; as with the other server-based tools, the PDF is deleted after processing.
The guide on the homepage (the “What would you like to do?” chat) sends your message and, if you have added files, their names, page count, size, and whether they are scans to OpenAI to identify the right tool. The files themselves remain in your browser; they are only sent to our server if the guide runs a tool with upload on your behalf (such as OCR or PDF to Word), in which case that tool's rules apply. We store conversations with the guide for 90 days under a random session ID without an IP address to improve the guide; passwords are not stored.
With “Improve PDF,” each selected page is sent as an image together with its text to the AI service (OpenAI), and an image model creates a new page image from it. The file is stored on our server during this time and is deleted no later than 60 minutes after the last activity. Do not upload documents whose content must not be sent to a service in the United States.
With “Publish PDF,” storage is the purpose: The files you upload there remain on our server for the period you choose (one day, one week, or 30 days) and can be accessed via the generated link. After that, they are automatically deleted; you can delete them earlier using the deletion link. The link is the only access point; anyone who has it can see the files. We only store a password as a hash. Anyone who enters a password receives a cookie for that specific publication, which is valid only until the browser is closed. We do not view the content unless someone reports misuse.
With “Translate PDF,” your file is transferred to our server for the duration of processing in the standard procedure: it is converted into a Word file there, translated paragraph by paragraph, and converted back into a PDF. After processing, the folder containing the file is deleted, even if an error occurs. With the “Lines in Place” procedure, the file stays on your device. In both cases, only the text paragraphs are sent to OpenAI.
With “Edit PDF,” the extracted text is checked: with LanguageTool, it stays on our server (a separate service with no external connection; nothing is stored); with AI, it is sent to OpenAI. Only when reformatting via Word is the file transferred to our server for processing and then deleted.
“Chat with PDF" works differently: Your file is transferred and remains on our server for the duration of the session so you can ask multiple questions in a row and view the referenced pages. It is automatically deleted after 60 minutes of inactivity; the “Done" button deletes it immediately. On the server, the document is divided into sections that are stored in a search database—also only on this server, inaccessible from outside—and deleted along with the file.
With “Chat with PDF," OpenAI does not receive the entire document, only the sections relevant to your question and your question itself. In addition, the text of the sections is sent to OpenAI once to make it searchable.
This text is transmitted to and processed by OpenAI, Inc., 1455 3rd Street, San Francisco, CA 94158, USA. We use OpenAI's API; according to OpenAI, data transmitted through this API is not used to train models.
Please keep in mind: If your document contains personal or confidential information, it is transmitted as text to a service provider in the USA. The transfer is based on the European Commission's standard contractual clauses. The legal basis is Art. 6 Abs. 1 lit. b DSGVO for the analysis you requested.
When redacting, you initially only see the AI's suggestion. Only when you confirm it is the file changed—and this again happens exclusively in your browser.
We store neither the transmitted text nor the response. We only record that a process took place and how many tokens it used.
An exception applies to “PDF to Flashcards”: If you select “Create online link” there, we store the generated flashcard set on our server for 30 days so it can be accessed via the link. It is then automatically deleted. The link is the only access; anyone who has it can see the cards. Nothing is stored without this click.
Usage statistics
To identify which tools are needed and where errors occur, we count operations, summarized by tool and day.
We store: number of visits, number of errors, amount of data processed, time required, and, for AI tools, the number of tokens. We do not store: IP addresses, file names, or file contents.
To improve the service, we also record for seven days which steps a visit goes through: pages viewed, tools used, whether a result was saved, errors that occurred, and time spent. Files, file names, text, and IP addresses are not included. A visit is assigned using a short code created daily with a new random value that cannot be reverse-engineered; no cookie is set for this purpose. This information is deleted after seven days. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in a service that works.
Server log files
When you access this website, information transmitted by your browser is collected automatically: browser type and version, operating system used, page accessed, previously visited page, date and time of access, and IP address.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. The legitimate interest is the secure and stable operation of the website. This data is not combined with other data sources. The log files are rotated daily and automatically deleted after a few days.
Cookies
We do not use cookies for advertising, audience measurement, or tracking. When you first use a tool that uses our server, we set one technically necessary cookie (“pdfde_b”, 30 days). It contains only a random identifier that is not linked to a person and is used solely to count the usage quota per browser rather than per internet address, so that multiple people behind a shared address (such as in a company) each have their own quota. The cookie is not shared with anyone and is not linked to other data. The legal basis is § 25(2) No. 2 TDDDG; consent is not required. You can delete the cookie from your browser at any time; the quota will then apply per internet address.
If you log in to the administration area, the WordPress content management system used also sets technically necessary cookies for the session. This applies only to editors, not visitors.
Hosting
This website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Deutschland. The servers are located in Germany. Hetzner processes the access data mentioned above on our behalf; a data processing agreement exists in accordance with Art. 28 DSGVO.
Delivery via Cloudflare
For secure and fast delivery, we use the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your request is routed through a Cloudflare server, which means Cloudflare processes your IP address.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO; the legitimate interest is protecting against attacks and delivering the website quickly. Transfers to the USA are based on the European Commission's standard contractual clauses.
Files you edit with browser tools are not affected because they do not leave your browser. Files you transfer to our server, however, pass through Cloudflare.
Encryption
For security reasons, this website uses TLS encryption. You can recognize an encrypted connection by the lock icon in your browser's address bar.
Your rights
You have the right at any time to obtain information about the data stored about you (Art. 15 DSGVO), to have it corrected (Art. 16 DSGVO), deleted (Art. 17 DSGVO), processing restricted (Art. 18 DSGVO), and transferred (Art. 20 DSGVO), as well as to object to processing (Art. 21 DSGVO).
Please contact [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority.