Privacy

Your files stay on your device

Every tool reads the file you choose inside your browser tab, does its work there, and hands the result back as a download. The file is not sent to PaperKit or to anyone else. Passwords you type into Protect PDF, Unlock PDF or the viewer are used in the tab to derive keys and are not stored or transmitted. The camera stream in Scan to PDF is shown on your screen and captured into photos locally.

No accounts, no cookies, no ad or tracking networks

There is no sign-up and no login. PaperKit sets no cookies, and in ordinary use neither does its host; if the bot protection run by Cloudflare ever challenges a request, it may set a short-lived security cookie for that check, which is not used to track you. PaperKit stores only these things in your browser: your light or dark theme choice, under the key paperkit-theme in local storage; the “Your desk” tally under paperkit-stats, which counts how many files you have handled, their total size and which tools you used, with no file names or contents, shown only to you and cleared with its Reset button; a copy of the site’s own pages and code, so it can open without a connection; a cache of text-recognition language data if you use OCR; and, for the moment it takes to open a tool, a file you drop on the home page, kept in this browser’s IndexedDB so the tool you pick can open it and deleted as soon as it does. Files you work on in a tool are never stored. Fonts, scripts, the PDF engine and the OCR language files are all served from this site. The only request a page makes elsewhere is to Cloudflare, the company that hosts the site, for the statistics script described below. There are no advertising, social or tracking networks.

What the host can see

The site is delivered by Cloudflare. Like any web host, it processes the technical details of each page request, such as your IP address, browser type and the address of the page, in order to deliver the page and to protect the site from abuse. Those requests never contain your files or their names.

Page statistics come from Cloudflare Web Analytics. It loads a small script from static.cloudflareinsights.com and reports aggregate figures: which pages are opened, the referring site, the country, the kind of browser and device, and how fast the page loaded. It sets no cookies, stores nothing in your browser, does not fingerprint you and does not follow you across sites. It never sees your files, their names or anything you type into a tool.

Search engines

When the site is updated, the list of public page addresses is sent to search engines so they can refresh their index. That list contains only PaperKit page URLs.