Privacy Policy

Last updated September 19, 2026

Last updated: September 19, 2026

The short version

PDFZaap's tools process your files in your browser. Your documents are read from your device, processed in your browser's memory, and written back to your device by a download. They are not uploaded to any server, because the site has no file-upload endpoint and no file storage. This is an architectural property of the site, not a policy promise — the processing simply does not have a network path.

What we do collect

  • Your file contents, names and sizes: never. No tool, no script on the site transmits any part of a document you select.
  • Optional event counts: the site includes a small, privacy-friendly analytics hook (documented in the source). When the site owner enables a provider (GA4 or Plausible), it records only counts and coarse events — for example that a tool was opened or a file was selected — with no file names, document contents, or personal data. Until a provider is configured, no analytics events leave your browser at all. You can inspect the exact events in the ZAAP_ANALYTICS configuration in the site's source code.
  • OCR language model download: the OCR tool, on its first run, downloads the public English language model from the Tesseract project's public CDN (tessdata.projectnaptha.com). That is the same public model file used by every Tesseract deployment; it contains no information about you, and your document is not part of it.

Cookies and local storage

PDFZaap does not set advertising or third-party tracking cookies. It uses one value in your browser's local storage (not a cookie) to remember whether you accepted or declined the cookie banner, so the banner does not repeat. You can remove it any time by clearing your browser's site data; nothing else on the site depends on it.

Advertising

The site currently serves no advertising and has no ad cookies. If that changes, this policy will be updated before any ad system is enabled.

Third-party services the page loads

  • Fonts (Google Fonts) and processing libraries (pdf-lib, pdf.js, Tesseract.js, html2pdf.js, SheetJS, PptxGenJS, Fabric.js, JSZip, Mammoth) are loaded from public CDNs (unpkg, cdnjs, jsdelivr) when you open a page. These are standard public software libraries; the libraries themselves do not receive your documents — they operate on data in your browser.
  • Search Console verification: the homepage carries a Google Search Console verification meta tag used only to verify site ownership for search indexing; it transmits no visitor data by itself.

Your rights and requests

Because the site does not collect personal data through its tools, there is generally nothing to access, correct or delete on our side. If you believe any data associated with you exists (for example, from a contact email you sent us), or if you have any privacy question, contact us at contact@pdfzaap.online and we will respond within a reasonable time.

Honest limits

Client-side processing means the website cannot see or keep your files — it does not mean your device is safe from everything. Your operating system, browser and any software on your machine still have normal access to your files. PDFZaap reduces exposure to the website; it does not replace basic device security.

Changes to this policy

If the site's data practices change (for example, enabling an analytics provider or adding advertising), this page will be updated and the 'Last updated' date changed before the change takes effect.