Privacy, in plain language.
Updated 15 October 2026
Anonymous free-tool exports
For basic free tools we count an operation only when the browser generates output and triggers a download without a reported error. Multiple output files from one operation count once. This does not confirm a saved file or its accuracy. A request contains only an allowlisted tool name and a fresh random event ID for short-lived duplicate filtering. No account cookie is sent. Only daily tool totals are stored, for up to 400 days; event IDs are not stored. A short-lived keyed IP digest is used in server memory for abuse prevention and is not saved with the event. Document contents, filenames and email addresses are never included. Browser Do Not Track and Global Privacy Control signals disable these export events. You can also open the workspace with export statistics disabled. Network blocking or offline use can cause undercounting; the counter never blocks document downloads.
Chinese summary of export statistics
免费工具只统计无报错的文件生成并触发下载操作，一次操作多个文件仍计 1 次，不代表已保存文件或结果准确。请求仅含工具代号与临时随机事件 ID，不发送账号 Cookie；仅持久保存日期、工具和次数，最长 400 天。限流使用内存中的短期 IP 摘要，不写入事件数据库。尊重浏览器 DNT/GPC；也可通过上方关闭统计的工作台链接退出。不会收集文件内容、文件名或邮箱。
Your documents stay on your device
PDF preview, editing, conversion and OCR run locally in your browser. PDFbuff does not receive your PDF bytes or filenames through its processing, analytics or beta APIs. We do not attach documents to feedback. Keep your original files and check exports before relying on them.
Your account
If you register, we store your email address, a password hash, verification records and login sessions to operate and secure your account. Account verification and recovery messages are sent through Resend. Account and session cookies are used for sign-in. No account is needed for basic free tools.
Website traffic
We count page views, daily and monthly visitors, source categories and device classes. Visitor identifiers are derived using a secret and rotate daily or monthly. The analytics database does not retain raw IP addresses, full referrer URLs, document contents or filenames. Page totals are retained for up to 400 days, daily visitor identifiers for 90 days and monthly identifiers for approximately 14 months. Our hosting and network providers process requests to deliver and protect the service.
Optional Founding Beta
When you explicitly join the beta, we associate your account ID with your membership, daily Pro allowance, tool names, document-operation counts, timestamps and outcomes. This lets us enforce beta access and measure successful exports and repeat use. We do not send document text, filenames or raw error messages in these events. Tool events are retained for up to 90 days. Membership and any interest you express remain associated with your account while the beta is administered.
Feedback
Feedback is optional. Text you submit, the selected tool, your account ID and any purchase-interest checkbox are visible only to authorized administrators. Feedback is retained for up to 180 days. Please do not include PDF contents, passwords, identity documents or bank details. Email feedback is handled by the configured email service and receiving mailbox; sending attachments by email is a separate, deliberate action and is not needed for testing.
Local settings and payments
Your browser stores interface preferences and any applicable license information locally. Beta access is checked with the server and is not saved as a permanent paid license. Paid checkout is currently disabled. Beta does not require payment details and does not create an order or an automatic charge. Before paid sales open, we will identify the seller, eligible locations, actual payment provider, total price and applicable taxes, and the cancellation and refund terms. Mandatory local consumer rights will not be limited.
Contact and choices
You can continue using basic free tools without joining the beta. Use our feedback page or its configured email address to ask about your information, request removal of beta feedback, or raise a privacy question.
Chinese privacy summary
PDF 内容及文件名不会通过处理、统计或内测接口上传。注册账号会保存邮箱、密码哈希与会话；加入限免前需主动同意记录账号标识、工具名称、次数和结果，使用事件最长保存 90 天。主动提交的文字反馈由管理员查看，最长保存 180 天。请勿在反馈中包含文件原文、证件、密码或银行信息。免费工具无需加入内测；限免到期不会自动扣款。