Your Privacy at FixedPDF
We believe you deserve to know exactly what happens to your files. Here's the short version: almost nothing leaves your device.
How FixedPDF Works
Merge, split, compress, rotate, organize, fill forms, add watermarks, and build forms — these all run entirely in your browser. Your PDF never leaves your device. We can't see it, we don't store it, we don't analyze it. Period.
What We Never See
Even when you opt into analytics, these categories are permanently blocked. Our code physically cannot collect them.
We Never Collect
File Contents
We never read your PDFs, documents, or images. All core tools run entirely in your browser.
Personal Information
No email addresses, names, physical addresses, or phone numbers are ever collected by analytics.
Device Fingerprinting
No canvas, WebGL, or font fingerprinting. We record a generic browser and OS name — nothing unique to your device.
Browsing Data
No URLs, cookies, or tracking IDs. We never know what pages you visit outside of FixedPDF.
Document Metadata
No form field values, annotations, watermark text, or signature content. Your document details stay private.
What We Do Collect
We offer three tiers of anonymous analytics. You choose your level in settings. Essential is the default.
| Tier | What's Included |
|---|---|
| Essential | Tool usage counts, page count ranges, session duration buckets |
| Standard | Everything in Essential, plus feature discovery patterns, error counts, and referral domain |
| Full | Everything in Standard, plus processing times and compression ratios |
What we'd send from your current session
Use any tool, then come back here to see exactly what we'd collect.
This is the complete payload. Nothing else.
When Server Processing Is Required
When you convert between PDF and Office formats or export PDF pages as images, your file is temporarily sent to ConvertAPI for processing. It's automatically deleted within 24 hours. We never read your file contents — we just pass it through.
View ConvertAPI's privacy policySigning requires server coordination so multiple parties can access the document. Your document is stored securely and automatically deleted 30 days after all parties have signed.
Your Controls
You're in charge. Visit your settings to change your analytics tier, clear local data, or opt out entirely.
To request deletion of any server-side data, email us at [email protected]. Delete your account and it's gone.
Third-Party Services
- Stripe — handles payments. We never see your full card number.
- Resend — sends transactional emails (signing invitations, receipts).
- ConvertAPI — processes format conversions. Files deleted within 24 hours.
Data Retention Summary
| Data Type | Retention | Location |
|---|---|---|
| Core operations | Nothing stored | Browser only |
| Analytics (optional) | 30 days daily / 12 months monthly | Aggregated, anonymous |
| Conversions | 24 hours | ConvertAPI servers |
| E-signatures | 30 days after completion | Encrypted storage |
| Account data | Until you delete it | Our database |