Privacy Policy

All PDF generation, conversion, compression, merging, splitting, editing, signing, and verification operations performed by iCreatePDF occur entirely inside your web browser using client-side JavaScript. Your files, images, and documents are processed locally on your device and are never transmitted to, stored on, or processed by any remote server or cloud infrastructure operated by iCreatePDF or any third party. This is a fundamental architectural choice, not just a policy — our servers have no capability to receive or store your files.

We collect the minimum data necessary to operate our website: • Aggregated analytics (page views, session duration, tool usage counts) — collected via privacy-respecting analytics that do not identify you personally. • Browser type and approximate geographic region (country level) for performance monitoring. • Error logs (anonymised) to help us fix technical issues. We do NOT collect: names, email addresses, IP addresses (stored beyond the current session), file names, file contents, or any information from the files you process.

iCreatePDF does not use tracking cookies or advertising cookies of any kind. We may use browser localStorage or sessionStorage solely to remember your UI preferences (such as default page size, output quality settings, or dark mode preference). This data never leaves your device and is not transmitted anywhere. You can clear this data at any time through your browser's developer tools or settings panel.

Our website may load resources from the following trusted third-party providers: • Google Fonts — to serve typography assets (font files). Google may log the request. No personal data related to your file usage is shared. • Vercel — our hosting platform. Vercel may collect server access logs (HTTP request metadata) for operational security purposes, governed by Vercel's own privacy policy. • Search Console / Analytics — we use Google Search Console for indexing verification only, and may use a self-hosted or privacy-first analytics tool (e.g., Plausible or Umami) for traffic statistics. None of these third parties have access to any files you process on iCreatePDF.

iCreatePDF is a general-purpose document tool and is not directed at children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has inadvertently provided us with personal data, please contact us and we will delete it promptly.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your privacy is additionally protected under the General Data Protection Regulation (GDPR) or equivalent legislation. Because iCreatePDF processes no personal data from your files and collects only minimal aggregated analytics, our legal basis for any processing is legitimate interest (operating and improving our free service). You have the right to: • Access any personal data we hold about you. • Request correction or deletion of your data. • Object to processing or request restriction. • Lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the email below.

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. iCreatePDF does not sell, rent, or trade personal information. The minimal analytics data we collect is not sold to any third party. California residents may contact us at the email below to exercise their CCPA rights.

Because we do not store your files or personally identifiable information, there is no file data to retain or delete. Aggregated, anonymised analytics data (page view counts, session durations) may be retained for up to 24 months for the purpose of product improvement. Any contact form submissions or support emails are retained only as long as necessary to resolve your query, after which they are permanently deleted.

iCreatePDF serves all pages over HTTPS (TLS 1.2+). Our hosting infrastructure includes DDoS protection, automatic TLS certificate rotation, and security headers (Content Security Policy, X-Frame-Options, Strict-Transport-Security). Since we do not store your files or personal data on our servers, the attack surface for data breaches is minimal by design. Your files remain on your device throughout the entire processing workflow.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: privacy@icreatepdf.com We aim to respond to all legitimate privacy requests within 14 business days.