← Back to OpenPDF

Privacy

Privacy policy

Last updated: 20 September 2026

OpenPDF is an AllOpen Labs application maintained by Marco B.. For privacy and support queries, contact support@openpdf.app. This policy covers openpdf.app and OpenPDF content opened through its Android app.

Your documents

PDF reading, editing and optical character recognition (OCR) run on your device. OpenPDF does not send your document content to its servers for processing. No account is required. When you save, print or share, your browser or Android passes the file to the destination you choose.

Local document processing does not mean that the site uses no external services: hosting, security, advertising, usage measurement and support can process other data, as described below.

Data stored on your device

IndexedDB may retain annotations, notes, drawn signatures and placed images so they can be restored in that browser. Appearance, language, interface and hint preferences may be stored in localStorage. Your browser may also cache app resources and OCR models. Consent, analytics and advertising providers may store cookies or other identifiers according to their configuration and your choices.

Local data belongs to that browser profile and is not an account or document backup. OpenPDF adds no encryption of its own to annotation storage: other people using the same profile, or extensions with sufficient permissions, may access it. You can delete annotations in the app; to remove all local data, use your browser settings for openpdf.app. This also clears preferences and may cause consent requests to appear again.

Usage and reliability measurement

We use Google Analytics 4 to understand which features people use and where they encounter difficulties. Our events describe fixed categories: tool, interface language, opening source (file picker or drag and drop), an attempt to open a PDF in the reader, the first usable view, time until that view, errors by stage, and save attempts or outcomes. Starting a download does not prove the file finished saving; a ready view does not prove someone read the document.

These events contain no file names or contents, text searched inside PDFs, form field values, signatures, document hashes or free-form error messages. We create no persistent identifiers of our own to track documents. Measurement can include browser identifiers, technical data, referral information and approximate location processed by Google Analytics; aggregate reports do not automatically make all underlying data anonymous.

Analytics waits for the consent provider to report that this purpose is granted or does not apply. An unknown state, error or unconfigured purpose does not enable it. When analytics is denied, we do not send our events or keep past actions to replay after acceptance. A region lookup alone does not trigger automatic acceptance by OpenPDF.

GA4 user and event data retention is configured to 14 months; the period associated with an identifier resets with new activity. Aggregate reports follow different retention rules. Read about Google Analytics retention.

Advertising and preferences

OpenPDF uses Google AdSense and Google Funding Choices for advertising and consent management. The consent provider may process connection data and store your choices. Advertising code is enabled when the provider reports known states for its purposes; it is not enabled as a fallback when the consent provider fails to load or its configuration is missing. Depending on your choices and applicable rules, the provider may offer personalized, non-personalized or limited ads. Rejecting personalization does not mean that no advertising-related requests or technical processing occur.

Google and its partners may use cookies and identifiers to show ads based on previous visits to this or other sites, according to your choices. Open Help & privacy → Cookie preferences in OpenPDF to review available options. Requesting that panel stops our usage measurement on the current page; your new choices are checked on the next page load. If the provider is unavailable, PDF tools continue working and you can contact support. Regional opt-out controls provided by the consent provider remain available.

You can also visit My Ad Center and read how Google uses information from its partners. Withdrawing consent does not affect processing lawfully carried out before withdrawal.

Hosting, support and providers

Support uses your email and the content you provide to answer your query. Avoid sending confidential PDFs, private keys, passwords or certificates. Messages and technical records may be retained while necessary to handle the query, operate the service, resolve incidents or meet applicable obligations; their retention is not the Analytics 14-month period. Local storage remains until you remove it or the browser clears it.

Hosting, security and responses to queries rely on the requested service and the legitimate interest in operating a reliable, secure service, as appropriate to the processing. Cookie use, measurement and advertising that require consent follow the corresponding choice. Providers may process data outside your country and play different roles depending on the service. Their data protection terms describe applicable transfer mechanisms and safeguards; services and processing activities do not all share one mechanism or retention period.

To detect security problems, your browser may send content security policy reports to csp.pingthat.dev. These reports may include the page URL, the blocked resource and technical details of the violation; they do not attach the PDF.

Optional signatures and connections

Signing with a .p12/.pfx certificate runs locally; OpenPDF does not send the private key or password to its servers. Optional timestamping sends a hash of the signature through OpenPDF’s proxy to the authority you choose, without the PDF. Obtaining public certificates for the certificate chain may involve network requests.

AutoFirma is a desktop integration: it exchanges the document directly with the application on the same computer. Since 10 September 2026, OpenPDF provides no server intermediary or temporary PDF storage for this connection. It is not presented as a verified Android feature.

Your rights and contact

Write to support@openpdf.app to request information, access, correction, deletion, restriction, portability or objection where applicable. We will review the data and providers involved; local PDF processing does not mean that no personal data exists in connection with your use or support query. You may also complain to the Spanish Data Protection Agency or another competent authority.

OpenPDF is a general utility and is not specifically directed at children. If you believe a child’s data has been processed inappropriately, contact us so we can review the case.

We will update this page when the practices described change. The date above identifies the latest revision.