Privacy Policy
Last updated:
This policy separates selected PDF content from the other data a website may process. Browser-local PDF work does not mean that accounts, subscriptions, consent choices, contact messages, analytics, advertising, or error reporting disappear.
1. Summary
The current compression and merge tools process selected PDF content in your browser tab. BytesPDF does not provide a PDF upload endpoint for those operations. Working blobs stay in the current tab's memory and are not persisted in IndexedDB, Cache Storage, or BytesPDF server storage.
The site uses the service providers and data categories described below. Google Analytics measures traffic unless you opt out of analytics. Google AdSense is opt-in and blog-only: no advertising tag or advertising cookie is deployed until you enable the Advertising category, and tool pages, /verify and account pages never load them. Declining leaves every advertising signal denied. First-party product-usage logs are written while analytics is enabled and stop as soon as you opt out.
2. Selected PDFs and downloaded output
- The browser reads the selected PDF and performs the current operation locally.
- Working document blobs and generated results remain in tab memory. Closing or reloading the tab releases application references; browser and operating-system memory management determine the exact cleanup timing.
- Every core tool can be processed and downloaded without an account, and BytesPDF has no download gate. BytesPDF Pro workflows are the exception: they need a free account and an eligible subscription, because that is how a subscription is linked to a person. Results stay in this page's memory until you save them; they are never uploaded and never placed in account storage. Closing or reloading the tab releases the in-memory result, so save your download before you navigate away.
- A result saved through the browser remains in the download location chosen by the user.
- The service worker caches application, worker, codec, and related program assets—not selected PDF content.
- Device malware, browser extensions, screen access, downloaded-file storage, and the later recipient remain outside BytesPDF's document-ingress claim.
- No PDF document bytes are intentionally sent to Google Analytics or an advertising provider by BytesPDF. AdSense is scoped to blog pages, which do not process your PDFs, and no ad code runs on any page that handles document content.
3. Other data we process
Account and profile
A BytesPDF account is optional: every core tool can be processed and downloaded without one, and creating an account never becomes a condition for getting your file. An account is only needed for BytesPDF Pro, which has to be linked to a subscription. When you create an account, Supabase can process an account identifier, email, authentication records, name/profile fields, role, account dates, and an internal launch-marker field that carries no discount, price or feature benefit. Password credentials are handled by Supabase authentication rather than stored as readable passwords by BytesPDF. Processed documents are not saved to the account.
Product updates and Pro billing
The footer and pricing update form submit your email and source label to the product-updates subscriber table, with limited campaign attribution (UTM source, medium, campaign, content, and landing page path). If you purchase Pro after checkout is enabled, Lemon Squeezy processes payment and billing/contact details under its own terms. BytesPDF receives subscription, customer and order identifiers, selected product/variant, subscription status, test-mode flag and billing-period dates linked to your BytesPDF account so it can grant or remove Pro access. BytesPDF does not store card numbers or security codes, and no PDF content or filename is included in billing records. Contact privacy@bytespdf.com for a data request; account deletion and retention handling may require manual processing.
Consent audit
Consent choices are stored locally and a best-effort audit entry can record categories, schema version, source, timestamp, and user-agent string. It intentionally excludes the account ID and PDF content.
Product-usage logging
Unless you opt out of analytics, BytesPDF logs the tool used, input byte size, output ratio, source path, and file count to Supabase with a null user ID. This is aggregate product telemetry, not an account document history, and it never includes PDF content or filenames. It is written while analytics is enabled and stops when you turn analytics off.
Guide ratings
If you rate a guide (the stars under the article), BytesPDF stores the page path, your 1–5 rating, and a random voter token your browser generated — no account ID, email, IP address, or user agent. One row exists per token per page, so changing your rating updates your earlier vote rather than adding a second one. The aggregate average and count are displayed on the rated guide.
Optional download feedback
After you request a download, a dismissible prompt may ask whether the tool was useful. If you choose to submit feedback, BytesPDF stores the tool page, your 1–5 rating, an optional comment (up to 1,000 characters), and a random token generated by your browser. BytesPDF also keeps an internal review status and may add internal moderation notes when reviewing or acting on feedback. Do not include document contents or sensitive personal information. The prompt is limited to at most once per week per page on this browser. Feedback is stored in Supabase; it does not include the PDF, its filename, your account ID, IP address, or user agent.
Optional Trustpilot invitation
After a PDF download action, an inline review link may be shown once per tab session. It is optional, asks for an honest review regardless of sentiment, and has no incentive or follow-up. If you choose to open the Trustpilot page, Trustpilot receives the ordinary connection and browser information associated with that visit. BytesPDF does not send a rating, account identifier, filename, or document data with the link. A session-only browser flag prevents repeating the invitation during the same tab session.
Trustpilot review widget
The homepage loads a Trustpilot review-count widget automatically when the page loads. The script and TrustBox connect your browser to Trustpilot, which may process browser/device, network, page-context, and widget-interaction data under its own privacy terms. The widget displays only the current number of reviews, not an overall rating or individual review text. The separate “View reviews” and “Write a review” links open the BytesPDF profile only after you choose them. We do not intentionally send PDF content, filenames, or account IDs to Trustpilot. See Trustpilot’s end-user privacy terms.
Advertising (opt-in, blog pages only)
Google AdSense is enabled as an opt-in choice. Until you enable the Advertising category, no advertising tag or ad cookie is loaded. Once enabled, Google and its advertising partners may receive browser/device and network information (which can include an IP address), the page or ad context, and ad impression or interaction data — on blog pages only. Depending on the final AdSense settings and applicable choices, cookies or similar technologies may be used for ad delivery, frequency capping, fraud prevention, measurement, and—only where enabled and permitted—personalization. BytesPDF does not intentionally include PDF bytes or filenames in ad requests. Google and its partners handle information under their own policies. See Google’s advertising technologies disclosure and Google’s Privacy Policy.
Advertising is a dedicated toggle in the BytesPDF privacy-choice controls, off by default, so you can decline ads while keeping analytics on, or the reverse. Where Google requires a certified consent-management platform for ads (including relevant users in the EEA, UK, or Switzerland), that requirement is met before serving ads there. Ad personalization controls are also available in Google My Ad Center where supported.
Directory badges
The homepage Listed on section loads badge images from Fazier, Smol Launch, and StartupBase. Their image hosts receive ordinary network and browser request information when those images load, including your IP address. Image requests and outbound badge links use a no-referrer policy; we do not supply document content or filenames to these providers.
Contact and error data
A contact submission includes what the sender enters. Configured error reporting can include page, browser, stack, and technical context. Do not attach or paste a PDF or sensitive document content into a support message.
4. Cookies, local storage, and caches
| Item | Purpose | Category | Provider / Location |
|---|---|---|---|
| Consent choice (bytespdf_consent_v2) | Remembers preferences and analytics choices; legacy marketing flag remains false | Essential preference record | localStorage |
| Supabase authentication storage | Maintains the signed-in session for account and BytesPDF Pro features; not needed to process or download files with the core tools | Essential when using an account | Browser storage |
| Banner dismissal | Remembers that the launch notice was closed | Preference | localStorage |
| Guide rating token and votes (bytespdf_rater_token_v1, bytespdf_guide_vote_v1:*) | Remembers a random anonymous token and which guides you rated, so a page shows your vote and a revote updates it | Essential when you rate a guide | localStorage |
| Download feedback preference (bytespdf_download_feedback_v1:*) | Remembers that the optional prompt was submitted or dismissed, limiting it to once per week per page in this browser | Preference | localStorage |
| Trustpilot invitation seen (bytespdf_trustpilot_invitation_seen_v1) | Prevents repeating the optional review link during the same tab session after a PDF download action | Preference | sessionStorage |
| Service worker cache | Caches application worker and codec assets — never PDFs | Essential application asset cache | Cache Storage |
| Microsoft Clarity (_clck, _clsk) | Masked public-page session replay and heatmaps, only after a saved analytics opt-in; not on PDF tools or account pages | Analytics | First-party cookies / Microsoft |
| Google Analytics (_ga, _ga_*) | Measures site traffic unless you opt out of analytics | Analytics | First-party cookie / Google |
| Google AdSense cookies or similar technologies | On blog pages and only after you opt in: ad delivery, frequency capping, fraud prevention, measurement and permitted personalization. Nothing is set while the category is declined | Advertising (opt-in) | Google and, depending on settings, its advertising partners |
| Anonymous usage log row | Aggregate product telemetry (tool, sizes, path) | Analytics | Supabase — null user ID, written unless you opt out of analytics |
Use Manage privacy choices in the footer to manage preferences and analytics. Opting out of analytics disables GA and removes first-party _ga cookies available to this origin. Advertising is a separate opt-in in Manage privacy choices: it is denied by default, and declining it removes Google Consent Mode advertising signals along with any ad tag. See Google’s cookie information for how Google describes its technologies.
Learn more: how Google uses cookies for Analytics.
5. Analytics and advertising status
Microsoft Clarity (optional session replay)
Clarity runs only on selected public pages (home, about, pricing and guides) on bytespdf.com after you save analytics enabled. It does not load on a first visit without a saved choice, on preview hosts, or on PDF tools, sign-in, account or contact pages. Pages with query strings are excluded. Page text is masked by default; no visitor identity or document events are supplied. Microsoft may process interaction, page, browser, device and network data, including IP addresses, to produce session replays and heatmaps. Turning analytics off stops collection and clears accessible first-party Clarity cookies; it cannot delete data already received by Microsoft. See Microsoft’s privacy statement. Keep sensitive document content out of public-page forms.
Google Analytics (analytics storage)
Google Analytics loads for traffic measurement by default and keeps loading until you opt out via the cookie banner or footer control. With analytics enabled, BytesPDF may send a coarse tool name and whether a PDF download was requested; a separate completed-download event is sent only when the browser file-system picker confirms a write. Filenames, PDF contents, file sizes and the BytesPDF account ID are not sent with these events. Google can process network and device information under its own terms, so this policy does not describe analytics as anonymous in an absolute sense. You can opt out at any time via the footer control — doing so sets ga-disable for this origin, stops future events, and removes first-party _ga cookies available to this origin.
Google AdSense (opt-in, blog pages only)
AdSense is active as an opt-in choice. Until you enable the Advertising category, no AdSense script, ad request, or advertising cookie is loaded. Once enabled, Google and its authorized ad partners may process browser/device and network information, the page or ad context, and ad impressions or interactions. Cookies or similar technologies may support ad delivery, frequency capping, fraud prevention and measurement; interest-based personalization would be used only if the final settings and applicable consent permit it. Google describes its practices in its advertising technologies disclosure and Privacy Policy. Consent records saved before advertising existed are re-prompted rather than assumed, so no stored value silently grants ad consent.
The privacy-choice interface has a dedicated Advertising toggle, off by default. Ad tags load only on blog pages, so /verify and every tool page stay free of ad requests — the page that lets you confirm no upload happens remains verifiable. Google Consent Mode advertising signals are denied until you opt in. If a Google-certified consent-management platform is required in your region, these disclosures will be updated to match the live configuration.
Managing analytics and future ads
Use footer → Manage privacy choices to turn analytics off or on. You can also use the Google Analytics opt-out add-on. Advertising is a separate toggle in the same panel, so you can decline ads while keeping analytics on, or the reverse. Ad-personalization controls are described here and Google also provides My Ad Center.
6. Service providers
| Provider | Purpose | Relevant data |
|---|---|---|
| Supabase | Authentication, profiles, subscription entitlement records, subscribers, consent audit, consented anonymous usage logs, anonymous guide ratings, and optional download feedback | Account/profile fields; linked Lemon Squeezy subscription, customer and order identifiers, product/variant, status and billing-period dates; subscriber email; consent categories, source, time and user agent; anonymous tool/size/path metrics after consent; anonymous guide ratings; optional download-feedback page, rating, comment and browser token |
| Lemon Squeezy | Pro checkout, payment processing, subscription management, receipts and applicable tax handling when checkout is enabled | Billing and contact details you provide to Lemon Squeezy, payment transaction data, and subscription information under its own terms. BytesPDF does not receive or store card numbers, security codes, or PDF content. |
| Google Analytics | Website traffic measurement (active by default unless you opt out) | Page and event data, device/browser and acquisition information handled under Google's terms; no PDF content or BytesPDF account ID is intentionally sent |
| Google AdSense (opt-in; blog pages only) | Third-party advertising, ad delivery and measurement on blog pages; personalization only if permitted by your consent settings | Only after you enable the Advertising category: Google and its advertising partners may process browser/device and network information, page/ad context, and ad impressions or interactions; cookies or similar technologies may be used depending on configuration. No ad tag loads on tool pages, /verify or account pages, and none loads at all while the category is declined. |
| Microsoft Clarity | Masked public-page session replay and heatmaps after a saved analytics opt-in; excluded from PDF tools, auth/account and contact pages | Public-page interactions, masked page structure, device/browser and network data, including IP address; no visitor identity or document events are supplied |
| Trustpilot | Displays the current number of BytesPDF reviews in an automatically loaded homepage Trustpilot widget; full review text remains on Trustpilot | When the homepage loads, the widget connects to Trustpilot and may expose browser/device, network, page-context and widget-interaction data under Trustpilot's terms. BytesPDF does not intentionally send PDF content, filenames, or account IDs to the widget. |
| Formspree | Contact-form delivery when configured | The name, email, subject, message, and technical request data involved in the submission |
| Sentry | Error reporting when configured | Error, stack, browser, page, and related technical context; also which request a refused third-party load came from when the site's Content Security Policy blocks one (blocked host and directive only — never document or PDF content). Users should not include document content in feedback fields |
These providers can process data in the United States or other regions according to their infrastructure and terms. Applicable transfer mechanisms and rights depend on the user's location and the provider's current legal arrangements.
7. Retention and deletion
- Selected PDFs have no BytesPDF server-retention period because the current core tools do not send document content to BytesPDF.
- Downloaded output remains under the user's control.
- Account, profile, and linked subscription identifiers/status remain while needed to provide the account or billing service, resolve access and payment questions, and meet legal obligations. Billing-record deletion/retention is handled manually at present; contact privacy@bytespdf.com.
- Subscriber data remains until unsubscribe or a valid deletion request, subject to necessary suppression or legal records.
- Consent, analytics, contact, and error records follow the applicable provider settings, operational need, and legal obligations. Your recorded consent choice is kept in this browser's localStorage until you clear it or the consent schema version changes. No third-party advertising cookies are currently set; if AdSense is enabled, Google-defined storage and retention will be disclosed against the live settings.
Automated self-service account deletion is not currently available on this static site. Send a request from the account email to privacy@bytespdf.com. Do not include a PDF or sensitive document with the request.
8. Choices and privacy rights
Depending on applicable law, a person may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent. Requests can be sent to the privacy address. Identity verification may be required, and some data may be retained where law permits or requires it.
- Use the site without creating an account.
- Keep analytics off or withdraw consent through the footer control.
- Unsubscribe from product email — one-click link in every email, or a manual removal request.
- Request profile, subscriber, contact, or consent-record access or deletion where applicable.
9. Security and important limits
BytesPDF uses browser isolation, local workers, HTTPS-hosted assets, and provider security controls as parts of its design. No system is risk-free. A compromised device, extension, origin, dependency, account, download location, or recipient can expose data despite local PDF processing. Third-party analytics providers are subject to their own security practices.
Read the security threat model →10. Regulated and children's data
BytesPDF is not a HIPAA Business Associate and does not offer a BAA. Browser-local processing reduces one transfer path but does not establish HIPAA, GDPR, or other compliance for an entire workflow. Follow the approved process for regulated, privileged, classified, or organization-controlled documents.
The service is not directed to children under 13. A parent or guardian who believes a child submitted personal data can contact the privacy address. No advertising tags are currently active. BytesPDF does not ask for or use age data; any future advertising configuration will be reviewed for applicable age-related requirements before activation.
11. Changes and contact
This policy can change as product behavior, providers, or legal requirements change. The dated version above identifies the current text. Material changes should be presented visibly rather than hidden behind an unchanged date.