Privacy policy

Who is responsible

The operator of PdfTaxi (https://pdftaxi.com) decides how the personal data described here is used (the "controller" under the EU and UK General Data Protection Regulation).

• Contact for privacy questions and requests: privacy@pdftaxi.com

PdfTaxi is the name of the service, not a separate legal entity; its operator is responsible for it.

In short

• Most tools work entirely in your browser: your file is opened and converted on your own device and is not uploaded.
• Five Office conversions (Word to PDF, Excel to PDF, PowerPoint to PDF, PDF to Word, PDF to PowerPoint) send the file to this site's server, only after you tick the box that agrees to it. The server converts the file and deletes it when the conversion ends.
• Nobody looks at your files. Apart from the short-lived server copy made for the five Office conversions, we do not keep them, and we never sell or share their content or use it to train any model.
• Usage statistics are counted only as described below, without cookies and without storing your IP address.
• The site shows no advertising.

Files you process

Tools that work in your browser (all PDF, image, spreadsheet, SQLite, ZIP and text-recognition tools) read the file on your device. Their processing code is downloaded from this site like any web page, but your file and its content are not sent anywhere.

Server conversions (Word to PDF, Excel to PDF, PowerPoint to PDF, PDF to Word, PDF to PowerPoint). Layouts of Word, Excel and PowerPoint files cannot be converted faithfully inside a browser, so for these tools — and only after you agree on the tool page — the file is sent over an encrypted (HTTPS) connection to this site's server. There it is:

• written to a private temporary folder that only the conversion service can read, under a generated name (the name you gave the file is not used);
• converted by LibreOffice running on the server, with a time limit of two minutes;
• deleted together with the result as soon as the conversion has ended — successfully or not — and the result has been sent back to you;
• if the server stops in the middle of a conversion (for example a crash or power loss), any leftover temporary folder is deleted automatically when the service starts again and by a check that runs every ten minutes.

Before it reaches the server, the file passes through the hosting and network providers listed under "Service providers". They carry it to the server as part of the encrypted connection; we do not ask them to keep it.

The uploaded file, its name and its content are never written to logs, statistics or backups.

Technical records on the server

When your browser requests a page or a file from this site, the web server writes an access log line with a shortened form of your IP address (the last part is replaced by zero; for IPv6 only the network part is kept), the date and time, the address of the page or tool requested (never your file name), the response code and size and how long it took. It does not record the page you came from or your browser's user-agent text.

When a request fails at the web server (for example a connection that breaks off), the server's error log records the full IP address of that request. Both logs are used to keep the site running and secure (for example to detect attacks and abuse) and are deleted after about 14 days.

For each server conversion the conversion service also records the tool used, the file size, how long it took and whether it worked — without your IP address or file name.

To protect the site from automated abuse, the number of recent requests per IP address is counted in the server's memory only, for at most one hour, and never written to disk.

Cookies and storage in your browser

This site stores the following on your device. None of it is sent to us, except the cookies listed further below, which your browser sends back to this site.

• Your theme choice (light or dark) — local storage, until you change it.
• Your answer about usage statistics — local storage, until you change it.
• While a chain of steps is unfinished: the steps and the names of the files in it — local storage, so a page refresh does not lose your work. It is removed when the chain is finished or cleared, and an unfinished chain older than 24 hours is deleted the next time you open the site.
• Working copies of your files and results — your browser's private file storage (Origin Private File System), one folder per browser tab. After the tab is closed, the folder is deleted the next time any page of this site is opened in the same browser (if the browser cannot tell whether the tab is still open, after 24 hours).
• Files dropped on the home page wait in your browser's IndexedDB for at most five minutes, until the tool page you chose takes them.
• Only after you allow statistics: a random number for the current tab, in session storage, deleted when the tab is closed.

PdfTaxi itself sets no cookies.

The network provider in front of this site may set strictly necessary security cookies of its own when its bot protection or a security check is switched on (for Cloudflare, for example __cf_bm, which expires after 30 minutes of inactivity, or cf_clearance after a check).

You can delete everything this site keeps in your browser with the button at the end of this page, or in your browser's site settings.

Usage statistics

Statistics are counted only if you allow them in the message shown on your first visit. You can change your answer at any time with "Privacy choices" at the bottom of every page. A Global Privacy Control signal from your browser is treated as "no".

What is counted: the page and tool, the language, the type and a size range of the file, how long a step took and whether it failed, your device type (phone, tablet or computer), your browser family and your country (taken from the network connection). For the first page of a visit only: the name of the site you came from (not the page address), campaign tags in the link (utm_source, utm_medium, utm_campaign) and whether the link came from a paid ad (the click identifier itself is not stored).

What is never counted: your files, file names, document text, anything you type, your IP address or your browser's user-agent text. No cookies are used for statistics.

Detailed records are deleted after 14 days; only daily totals are kept, for up to 13 months. Backups never include the detailed records.

Why we may use this data (legal bases)

• Converting your files and keeping working copies in your browser: to provide the service you asked for (GDPR Art. 6(1)(b)).
• Server access logs and abuse protection: our legitimate interest in keeping the site available and secure (GDPR Art. 6(1)(f)).
• Usage statistics: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
• Answering your requests and complying with the law: legal obligation (GDPR Art. 6(1)(c)).

Service providers and transfers abroad

Where a provider processes data outside your country — for example outside the European Economic Area — the transfer relies on the safeguards that provider offers (such as an adequacy decision or standard contractual clauses). Ask us for details.

A network provider in front of the site (such as Cloudflare) keeps its own records of the connections it carries, under its own retention rules; we cannot shorten them.

We do not sell your personal data and we do not share it for cross-context behavioural advertising, except through the Google advertising described above when it is switched on.

How long data is kept

• Files sent to the server: only for the duration of the conversion (at most about two minutes); never in backups.
• Web server access logs (shortened IP address) and error logs (full IP address of failed requests): about 14 days.
• Server system journal: at most 14 days.
• Conversion records (tool, size, duration, result): in the server journal, which is limited in size and overwritten as new records arrive.
• Usage statistics: detailed records 14 days, daily totals up to 13 months.
• Server backups (settings and the administrators' audit log; never files, file names or detailed statistics) are kept for about 14 days.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. Residents of some US states (for example California) may also ask what we collect and ask us not to sell or share it — we do not sell or share it.

To exercise a right, write to privacy@pdftaxi.com. We answer within the time the law that applies to you sets — at the latest within one month, and sooner where your country's law requires it. We may ask for information to confirm the request is yours. Because we do not keep your files, shorten IP addresses in our access logs and do not link statistics to you, we usually hold no personal data about you that we could identify as yours.

You may also complain to a data protection authority, for example in the country where you live or work.

Children

This site is not directed at children under 13 and does not knowingly collect personal data from them. In the EU and UK, consent for statistics or advertising is not asked from children below the age set by their country's law; if you are younger, please ask a parent before allowing statistics or ads.

Security

All traffic to the site uses HTTPS. On the server, conversion files are kept in folders that only the conversion service can read and are never logged; administrator sign-in requires a password and an authenticator code. No security certification or independent security audit is claimed. No system is perfectly secure: do not process documents whose disclosure could seriously harm you if you cannot accept that small risk; the tools that work in your browser never send your file anywhere.

Changes to this policy

We update this policy when the site changes. The date below shows the latest version. Last updated: 2026-10-26.