Privacy Policy and Data Notice

The controller of your personal data is the person or organisation that operates the PDFont website.

For any question or request about this policy: [email protected]

The PDFs and images you add to the tools are processed only on your device, inside your browser. They are not sent to our server, so there is no retention period: there is nothing to retain. We do not use your files or their contents for anything, including training AI models; they simply never reach us. Our How it works page shows you how to check this.

1. Serving the site (hosting)

The site is hosted on Cloudflare. As with any website, when you open a page your browser sends Cloudflare your IP address, browser and device details (User-Agent), the address of the page, your language preference and the time of the request. We have no server or access logs of our own: Cloudflare processes this data to deliver the site, protect it from attacks and fix technical problems. Cloudflare may also ask your browser for a short report when network errors happen (Network Error Logging), which can include your IP address and the page address.

Legal basis: our legitimate interest in keeping the site secure and working (GDPR Art. 6(1)(f)).

2. Visit statistics

Cloudflare Web Analytics shows us, in aggregate, which pages are visited and how fast they load: page address, referring site, country, browser type and load timings. It uses no cookies or local storage and builds no profiles of individual visitors.

Legal basis: our legitimate interest in improving the service (GDPR Art. 6(1)(f)).

3. When you write to us

If you e-mail [email protected], we use your e-mail address, your name if you give it, and whatever you tell us, only to reply and deal with your request.

Legal basis: our legitimate interest in answering you (GDPR Art. 6(1)(f)) and, for data protection requests, a legal obligation (Art. 6(1)(c)).

We do not sell your personal information, we do not share it with anyone for advertising, and we do not use it to profile you. This is also our answer under US state privacy laws: there is no sale or sharing to opt out of.

Signing in with Google is optional; you can also sign up with an e-mail address and password. If you sign in with Google, we receive only your name, your e-mail address, whether that address is verified, and your Google account ID (a permanent number tied to your account). We do not store your profile picture. We do not access your Google Drive, Gmail, contacts or any other Google data.

We use this data only to sign you in and recognise your account, and to send security notices to your e-mail. We do not sell it, use it for advertising, use it to train artificial intelligence or machine learning models, or share it with anyone except where the law requires.

It is kept with your membership data. You can remove the Google connection at any time from My account, or delete your account; after deletion your data is deleted or anonymised within 30 days. Your files are still processed only on your device and never sent to a server, whether or not you sign in with Google.

PDFont’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use no advertising or tracking cookies. The items below are kept in your browser only for features you ask for, which is why we do not ask for separate consent. The locale cookie travels with your requests to the site; everything else never leaves your device and we cannot see it.

You can delete your recent activity list right here. To remove everything, you can also clear this site’s data in your browser settings.

• Cloudflare, Inc. (USA): our provider for hosting, content delivery, security and visit statistics. See the Cloudflare privacy policy.
• Our e-mail service provider: only for messages you send us.
• Competent authorities: only where the law requires it.

Cloudflare is a US company with data centres around the world, so hosting and statistics data may be processed outside your country, including in the United States. For these transfers we rely on the Standard Contractual Clauses included in Cloudflare’s data processing terms. For users in Türkiye, the intended basis is the standard contract route of Article 9 of the Turkish data protection law (KVKK), which involves signing the standard contract and notifying the Turkish authority. The same applies to our e-mail service provider if it is located abroad, for the messages you send us.

• Your files: never, because they never reach us.
• Hosting logs: we keep none of our own; Cloudflare keeps its technical logs for the period set out in its policy.
• Visit statistics: kept by Cloudflare in aggregate form.
• E-mails: until your request is dealt with, then as long as needed for any legal obligations.
• Data in your browser: until you delete it (the cookie expires after 1 year at most).

You can ask us for access to your personal data, to correct or erase it, to restrict its processing or to receive it in a portable form, and you can object to processing based on our legitimate interests. Write to [email protected]; we answer within the legal deadline of one month. Because we have no user accounts and receive no files, we often cannot link a request to a particular person; if so, we will tell you plainly what we do hold. You can also complain to the data protection authority where you live (in the UK, the Information Commissioner’s Office).

If you use the site from Türkiye, you also have the rights in Article 11 of the KVKK, which you can exercise at the same address; the Turkish version of this page lists them in full.

PDFont is not directed at children under 13 and does not knowingly collect personal data from children.

We update this policy when the service changes; the date of the current version is shown at the top of the page. If there is a significant change, we will say so clearly on this page. This policy is not legal advice: it describes what the site actually does today.