HomePrivacy Policy
Last updated January 5, 2026

Privacy Policy.

We don't collect, store, or see your files. Everything you do with PDFslime happens in your browser.

The short version

Your PDF files never leave your device. PDFslime is a client-side web application: every tool — merging, splitting, compressing, OCR, protecting, unlocking, editing, form-building — runs entirely inside your browser. We have no servers that process, receive, or store your documents.

The only data anyone ever sees about you comes from your browser talking to Cloudflare (our hosting provider), the CDNs that deliver open-source libraries, and, if you consent, Google AdSense. Details below.

Who we are

"PDFslime", "we", "us" and "our" refer to the operator of the website located at https://pdfslime.app. For privacy questions, please contact us.

What we don't collect

PDFslime is designed to be privacy-first from the ground up. We do not:

  • Collect names, email addresses, phone numbers, or any personal identifiers
  • Require account creation, sign-ups or logins
  • Run first-party analytics (no Google Analytics, no Plausible, no Fathom, no fingerprinting)
  • Read, store, upload or transmit the content of the PDFs, images or other files you open in the tools
  • Sell, rent or trade any information about you to any third party
  • Build profiles about you, your device, or your usage patterns

What is collected automatically (by our providers)

Certain non-personal technical information is unavoidably visible to the parties that deliver this website:

Server / edge logs (Cloudflare Pages)

PDFslime is hosted on Cloudflare Pages. When your browser requests a page, Cloudflare's edge network — for security, abuse prevention and basic uptime — temporarily records:

  • Your IP address
  • The URL requested
  • Your user agent (browser and operating system)
  • The referring page (if any)
  • The timestamp of the request

We do not have access to these logs beyond aggregated, anonymised metrics (total requests, bandwidth). Cloudflare processes this data as our data processor under its own privacy policy. Standard edge logs are typically retained by Cloudflare for a matter of days.

Third-party CDNs

Your browser fetches the following open-source JavaScript libraries and web fonts from public CDNs. Each CDN sees a standard HTTP request (IP + user-agent + URL of the file requested), but never the content of your PDF files:

How PDFslime works technically

When you visit any tool page, your browser downloads a few JavaScript libraries (see above) and runs them locally. When you open a PDF, image, or other file in a tool, the file is loaded into your browser's memory using the File/Blob APIs. All processing — reading the document structure, rendering pages, applying edits, adding form fields, encrypting/decrypting, exporting the result — happens with plain JavaScript on your device. Nothing about the file's contents is ever transmitted over the network. When you download the result, your browser saves it directly to your Downloads folder using a local Blob URL.

Local storage

PDFslime uses your browser's localStorage for small pieces of interface state that make the site more pleasant to use:

  • Theme preference (light or dark)
  • Form-Builder rail expansion state in the PDF Editor
  • Your cookie/consent choice so we don't ask twice

These values never leave your device. You can delete them at any time by clearing site data in your browser.

Cookies

PDFslime itself sets no first-party cookies. If you consent to advertising, Google's AdSense service will set advertising cookies in your browser under this domain — see the next two sections and our Cookie Policy for the full list.

Advertising (Google AdSense)

To support the free running of these tools, PDFslime may display advertisements delivered by Google AdSense. When ads are enabled and you have consented:

  • Google, as a third-party vendor, uses cookies and web-beacons (including the DoubleClick DART cookie and the __gads, __gpi and __eoi cookies) to serve ads based on your prior visits to this site and other sites on the internet.
  • Google may collect your IP address, user agent, approximate location, ad interactions, and pages viewed on PDFslime, in order to measure and personalise ads. Google — not PDFslime — determines and controls this processing.
  • Ads served by Google may include content, images and links from third-party advertisers. PDFslime has no editorial control over advertising creatives shown.
  • Google's ad services are governed by Google's advertising policies and its main privacy policy.

Ads never see your PDF files. Because your documents are processed exclusively in your browser and never uploaded, Google's ad servers have no technical means of receiving them.

Managing consent and opting out

  • Users in the European Economic Area, United Kingdom, and Switzerland are shown a consent notice managed by Google's Consent Management Platform (CMP) before personalised advertising is enabled. Non-personalised ads may still be shown if you decline.
  • You can opt out of Google's personalised advertising at any time at adssettings.google.com.
  • You can opt out of many advertising networks' use of cookies for personalisation at aboutads.info/choices (US) or youronlinechoices.eu (EU).
  • You can clear your consent choice at any time by clearing this site's cookies and local storage in your browser.
  • Most modern browsers offer a "Do Not Track" or "Global Privacy Control" signal. Where legally required, we and our partners honour Global Privacy Control (GPC) as a valid opt-out of the sale/sharing of personal information.

Your privacy rights

If you are in the European Economic Area, United Kingdom, or Switzerland (GDPR / UK GDPR)

You have the right to:

  • Access any personal data we or our processors hold about you
  • Rectify data that is inaccurate
  • Erase data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your national data protection authority

Because PDFslime does not collect personal data directly, most of these rights are exercised against our processors (Cloudflare for hosting logs, Google for advertising) rather than us. Their privacy policies explain how to do so. For anything you believe we hold, contact us and we will respond within 30 days.

Legal basis for processing: where PDFslime displays advertising, our legal basis is your consent (Art. 6(1)(a) GDPR). For essential site delivery and security, our legal basis is our legitimate interest in operating the website (Art. 6(1)(f) GDPR).

If you are in California (CCPA / CPRA)

California residents have the right to:

  • Know what personal information is collected and how it is used and shared
  • Delete personal information collected from them
  • Correct inaccurate personal information
  • Opt-out of the "sale" or "sharing" of personal information (including cross-context behavioural advertising)
  • Limit the use of sensitive personal information
  • Non-discrimination for exercising these rights

PDFslime does not sell personal information. Where third-party advertising cookies could be considered a "sale" or "sharing" under the CPRA, declining the consent banner constitutes an opt-out.

If you are in another jurisdiction

We aim to honour equivalent rights (Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, etc.) on a best-effort basis. Contact us if you have a specific request.

International data transfers

PDFslime is served from Cloudflare's global edge network, meaning your requests may be handled by servers in any country where Cloudflare operates. Google's advertising infrastructure is likewise global. Where personal data is transferred out of the EEA/UK, our processors rely on the European Commission's Standard Contractual Clauses and, for US transfers, on the EU-US Data Privacy Framework.

Data retention

  • Your files: never stored by us — they exist only in your browser's memory during your session.
  • LocalStorage preferences: until you clear them.
  • Cloudflare edge logs: retained by Cloudflare per their policy (typically days).
  • Google advertising data: retained per Google's policies — see Google's Privacy Policy.

Security

PDFslime is served exclusively over HTTPS with HSTS preload. Every page enforces a strict Content Security Policy that limits what scripts and styles can run. All third-party JavaScript libraries are pinned to specific versions and verified with Subresource Integrity (SRI) hashes, so a tampered library cannot execute. Because your files never touch a server, there is no server-side database that could be breached.

Children's privacy

PDFslime is not directed at children under 13 (or 16 in some EU jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us or one of our processors, please contact us so we can help.

Third-party links

PDFslime may link to external websites — for example, the CDN and library sources cited above. We are not responsible for the privacy practices of those third parties. Please read their own privacy policies.

Changes to this policy

We may update this policy from time to time to reflect changes to the site, our partners, or the law. When we do, we will update the "Last updated" date at the top of this page. Material changes will be highlighted in a notice on the site for a reasonable period. Continued use of PDFslime after changes take effect constitutes acceptance of the revised policy.

Contact

Privacy questions, data-subject requests, or complaints? Get in touch. We respond to legitimate requests within 30 days.