Privacy

Last updated 27 August 2026

stackpetal processes your files inside your own web browser. Your documents are never sent to us, because there is no server to send them to.

What happens to your files

When you add a PDF or image, it is read directly by your browser and held in your device's memory for as long as the tab is open. Every operation — merging, splitting, rotating, watermarking, building a PDF from images — runs as code on your own machine.

Nothing is transmitted over the network. We never receive a copy, so we cannot read, store, share, sell or hand over your documents, and there is no copy of them anywhere for a future breach to expose. Closing or refreshing the tab discards everything.

You can check this yourself: open your browser's developer tools, switch to the Network tab, and run any of the tools. You will see no request carrying your file.

Information we do collect

We use Cloudflare Web Analytics to count visits. It records aggregate figures such as page views, referring sites, general country and browser type. It does not use cookies, does not fingerprint your device, and does not build a profile of you across sites.

Our host, Cloudflare, keeps standard server logs including IP addresses for security and abuse prevention, as any web host does. These relate to page requests only and never contain document contents.

Cookies

stackpetal sets no cookies of its own and does not use browser storage to track you.

Advertising

We may in future show advertising to cover running costs. Advertising providers such as Google may set their own cookies to serve and measure ads, governed by their own policies. This will never give them access to your files, since your files never leave your device. If we introduce ads, we will update this page first.

Third party code

The site loads open source libraries (pdf-lib, pdf.js and JSZip) and web fonts from public content delivery networks. Those providers can see that your browser requested a file, along with your IP address, in the same way any website with external resources works. They receive nothing about your documents.

Children

stackpetal is a general purpose utility and is not directed at children under 13. We do not knowingly collect personal information from anyone, of any age.

Your rights

Data protection laws such as the GDPR give you rights to access, correct and erase personal data held about you. In practice we hold almost nothing: we have no accounts, no email list and no document storage. If you want to know what analytics data relates to you, or want it removed, write to us and we will help.

Changes

If this policy changes, the date at the top will change with it. Material changes will be noted on the home page.

Contact

Questions about privacy can go to hello@stackpetal.com.