Privacy Policy

The short version

• We process zero user files on our servers. Every tool runs inside your browser.
• We have no accounts for visitors, no advertising and no tracking cookies.
• We log a few anonymous counters (which tool was used, a rough size range, a rough duration range, success or failure) so we know what to improve.

1. Your files

When you choose a file, your browser reads it into your device’s memory. All processing — merging, splitting, compressing, OCR, encryption and every other operation — is performed by JavaScript and WebAssembly code running on your own device. The result is created in memory and offered to you as a download.

At no point is file content, a file name, a page image, extracted text or a password sent to us or to anyone else. We do not operate any upload endpoint, file storage, or file database. Because we never receive your files, we cannot read, keep, share, sell, lose or be compelled to disclose them.

This is enforced technically, not just promised: our pages are served with a Content-Security-Policy that only allows the tools to connect to our own domain, and the only data endpoint on that domain accepts the four anonymous fields described below — nothing else. You can verify this yourself in your browser’s developer tools (Network tab), or by loading a tool, disconnecting from the internet and using it offline.

The processing engines (pdf.js, pdf-lib, Tesseract OCR and its English language model) are served from our own domain. No content delivery network or third-party service is contacted while you use a tool.

2. Anonymous usage metrics

After a tool finishes, your browser may send us one small record containing exactly:

• tool — which tool was used, e.g. “merge-pdf”;
• size bucket — a range such as “1-5MB”, never the exact size;
• duration bucket — a range such as “1-3s”;
• ok — whether the job succeeded.

The record contains no file name, no content, no identifier and no cookie. We store it with a timestamp in an append-only log that is used only to compute totals such as “jobs per day” and “error rate”. If your browser sends a Do Not Track or Global Privacy Control signal, we do not send this record at all.

3. Technical data needed to run a website

Like every website, our server necessarily sees your IP address when your browser requests a page. To protect the metrics endpoint from abuse, we compute a one-way SHA-256 hash of your IP address combined with a secret value and keep it in memory only, for at most a few minutes, to count requests. The raw IP address is never written to our metrics log.

Our reverse proxy may keep standard access logs (IP address, time, requested URL, browser type) for security and troubleshooting. These logs never contain file data, are kept for no longer than 14 days and are then deleted. They are not used for analytics or profiling.

4. Legal basis and roles (GDPR / UK GDPR)

Because your documents are processed on your own device and never transmitted to us, we do not act as a controller or processor of the contents of your files. For the minimal technical data described in sections 2 and 3, Yoomey AI is the controller and relies on its legitimate interest (Art. 6(1)(f) GDPR) in operating a secure, reliable service. Hosting is provided by a data-centre provider acting as our processor under a data processing agreement.

5. Cookies and local storage

We do not use tracking or advertising cookies. We remember your light/dark theme choice in your browser’s local storage. See our Cookie Policy for the full list.

6. Children

The service is not directed at children under 16 and we knowingly collect no personal data from anyone.

7. Your rights

You have the right to access, rectify, erase or restrict processing of personal data about you and to object to processing based on legitimate interest, and you may complain to your local data-protection authority. Because our metrics are anonymous, we are usually unable to link any record to you — which is the point. For any privacy question, email [email protected].

8. Changes

If we ever change how files are handled, we will say so prominently on this page before the change takes effect. The core promise — files are processed only on your device — is the foundation of the product.