HTTPS Transfer Protection

All communication between your browser and our servers is encrypted using HTTPS/TLS connections. This ensures that your files and data are protected during transit and cannot be intercepted or read by third parties.

Temporary File Storage

Uploaded files are stored in isolated directories with randomised, non-guessable names. Files are kept in a secure server environment with restricted access. Only the processing system and the authorised download endpoint can interact with your files.

Secure Download Identifiers

Each processed file is assigned a unique, cryptographically random download identifier. This identifier is required to retrieve your result and cannot be guessed or enumerated. Download links are not published or shared publicly.

File Expiry

Uploaded files and processed results are retained for a maximum of 2 hours from the time of processing. After this period, all associated files are permanently deleted from the server and cannot be recovered.

Automatic Cleanup

A scheduled cleanup job runs at regular intervals to identify and permanently delete expired files. This process removes both the uploaded original and the processed output, including all temporary working files created during processing.

Password Handling

Any passwords provided to unlock protected files (e.g., password-protected PDFs) are used only for the immediate processing request. Passwords are held in memory during processing and are not stored, logged, or persisted in any way after the operation completes.

Processing Logs

Internal processing logs may record non-content metadata such as file size, processing duration, tool used, and success or failure status. These logs do not contain file contents, file names, or any personal data. Logs are retained for operational purposes only.

Account Usage Tracking

For registered users, we track the number of successful processing operations to enforce usage limits. This tracking is associated with your account identifier and does not involve inspection or storage of your file contents.

Guest Usage Identifiers

Guest users are assigned a random, secure identifier stored in an HttpOnly cookie. This identifier is hashed using SHA-256 and used solely to track guest processing usage. The identifier contains no personal information and cannot be used to identify you.

Security Limitations

While we implement reasonable technical and organisational safeguards to protect your data, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security against all threats. Users are encouraged to avoid uploading highly sensitive or confidential files.

User Responsibility

You are responsible for maintaining the security of your own device, browser, and network. After downloading your processed file, you should store it securely. We recommend keeping backups of original files before processing.

If you have security concerns, please contact our support team.