Privacy policy

PDF Canary is operated by Nathaniel Lachapelle (Ontario, Canada). This policy explains what we collect and why. The short version: your files are never stored, we don't have accounts, and we don't sell data.

Your files

• Conversions in your browser. On most computers, many tools run entirely on your device. Your file is never uploaded to us.
• Conversions on our server. Larger files, and formats that browsers can't handle, are sent over an encrypted connection to our conversion server. They are held in memory only, never written to disk storage, databases or backups, and never logged. Each file is permanently deleted as soon as you download the result, when you request a refund, or 15 minutes after upload, whichever comes first.
• We never look at, analyze or share the content of your files.

Payments

Payments are handled by Stripe. Your card details go directly to Stripe and never touch our servers. We receive the amount, the payment status and, if you provide it, the email address for your receipt. We never save a card for future charges. See Stripe's privacy policy.

Analytics

If you allow it in the cookie banner, we use PostHog to count page views and steps of the conversion flow (for example, "file dropped" or "payment completed"), so we can improve the site. We never send file names or file contents to analytics, and IP addresses are not stored. If you decline, no analytics are loaded.

Cookies and local storage

We store a few small values in your browser: your cookie choice, the price you were shown, and a performance score for your device so we can decide whether a conversion runs in your browser. None of these identify you.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and where they apply the GDPR, UK GDPR and CCPA, you can ask what personal data we hold about you, ask us to correct it, and ask us to delete it. Because we have no accounts and don't store files, this is usually limited to payment records that Stripe keeps for tax and fraud rules. Email support@pdfcanary.com.

Where data is processed

Our websites and payment service run on Cloudflare's global network, our conversion server runs on Railway, and payments are processed by Stripe. These providers may process data outside Canada, including in the United States, under their own privacy and security commitments.

If you're not satisfied with our answer to a privacy question, you can contact the Office of the Privacy Commissioner of Canada.

Contact

Nathaniel Lachapelle, Ontario, Canada. support@pdfcanary.com