
Privacy Policy
Last updated: September 2, 2026
This policy explains what FatafatPDF does and doesn't do with your data. The short version: the PDFs and images you work with are never collected by us at all, because every tool runs entirely on your own device. Everything below is about the small amount of other data — site analytics and anything you voluntarily send us through the contact form — that a normal website involves.
Your files are never uploaded
Every tool on this site — merging, splitting, compressing, signing, redacting, OCR, all of it — processes your PDFs and images locally, in your browser, using JavaScript and WebAssembly libraries that run on your own device. Your files are never sent to our servers, never stored anywhere by us, and never seen by anyone on our end. There is no upload step in the code path for any tool to bypass, remove, or misconfigure — it simply isn't there.
You don't have to take this on faith. Open your browser's developer tools, go to the Network tab, and use any tool on this site — you'll see for yourself that no request carrying your file's contents is ever made. Here's a longer explanation of the mechanism behind that, if you want the technical detail.
What we do collect, and why
Since no file ever reaches us, everything below is limited to ordinary website operation:
- Site analytics (Google Analytics). We use Google Analytics to understand which pages get visited and roughly how the site is used — page views, general device/browser type, and approximate location at a country/region level. This does not include anything about the files you process. Google Analytics sets its own cookies and is governed by Google's Privacy Policy.
- First-party traffic stats. We also keep a small, first-party record of aggregate site traffic — a session identifier (a random cookie, not tied to your name or any account), your country (determined at the network edge, not from anything you enter), and which pages were viewed. This exists purely to understand overall traffic and spot bot activity; it is never linked to any file you process, and old records are automatically deleted after 90 days.
- The contact form. If you use the Contact page, we collect whatever you enter — typically your name, email address, and message — solely so we can read and reply to you. It's sent directly as an email to us through a transactional email provider (Resend) and isn't stored in a database or added to any marketing list. We don't use anything submitted through the contact form for advertising or share it with third parties beyond what's needed to deliver that one email.
- Your language preference. If you switch the site's language, that choice is saved in your browser's local storage so we can show you the same language next time. This stays on your device and isn't sent to us.
Cookies and local storage, plainly
We use a small number of cookies/local-storage entries: an analytics cookie from Google Analytics, a first-party session cookie for the traffic stats described above, and a local storage entry for your language preference. None of these are used for advertising, none are sold to third parties, and none are linked to the contents of any file you process — because that content never reaches us in the first place.
Third-party services we use
A few outside services support parts of the site that aren't file processing:
- Cloudflare — hosts the site and serves every page; sees standard web request metadata (like any host would) but not your file contents.
- Google Analytics — aggregate site usage stats, as described above.
- Resend — delivers contact form emails to us.
We don't sell data to anyone, and we don't run third-party advertising or ad-tracking scripts on this site.
Your rights and choices
Because no file you process is ever stored by us, there's nothing on that front to request deletion of — the file was never in our possession to begin with. For anything you've submitted through the contact form, you can ask us to delete our record of that email at any time by reaching out through the same Contact page. You can also disable cookies in your browser at any time; doing so won't affect your ability to use any tool, since none of them depend on an account, a cookie, or any stored state to function.
Children's privacy
FatafatPDF isn't directed at children, and we don't knowingly collect personal information from children. The site's analytics and contact form work the same way for every visitor described above, with no separate handling for age.
Changes to this policy
If this policy changes, we'll update this page and the "last updated" date at the top. We won't make changes that reduce the core promise here — your files are processed locally and never uploaded — without being upfront about it on this page.
Questions
If anything here is unclear, or you have a question about how a specific piece of data is handled, reach us through the Contact page — we read every message.