PDFZova uses Google Analytics to see which tools are used and improve the site. It records page visits and device information only — never your PDF files, their contents, file names, or passwords. Accept or reject: the site works fully either way.

Read the Privacy Policy

You can change this later under Cookie settings in the footer.

PDFZova

Privacy Policy

Last updated: 1 November 2026. This policy covers the browser-based version of PDFZova.

1. Files never leave your device (working tools)

Every working tool on PDFZova runs entirely in your browser using pdf-lib and pdf.js. Your files are read from your device, processed in memory on your device, and downloaded back to your device. They are never uploaded to a PDFZova server, never stored by PDFZova, and never shared with third parties. Closing the tab discards them. Passwords entered into the Unlock tool are used only in your browser to open your file and are never sent anywhere.

2. What we do not collect

This version has no accounts, no sign-in, and no advertisement code. PDFZova uses Google Analytics 4 to understand how the site is used (see section 4); this does not change how your files are handled. PDFZova does not upload your documents, file names, signatures, passwords, or document text to its servers or send them to Google Analytics. Your files are processed locally in your browser. Page-level usage statistics tied to cookie-based identifiers are collected only through Google Analytics (see section 4). There are no advertisements on the site, and no ad network code is loaded.

3. What the hosting provider may see

Like any website, the hosting provider (Cloudflare Pages, when deployed) may log ordinary web-request data such as IP addresses and requested pages, under its own privacy policy. That logging does not include your PDF contents, because contents are never sent.

4. Cookies and Google Analytics

PDFZova itself does not set cookies. We use Google Analytics 4, a web analytics service provided by Google (Google LLC, and Google Ireland Limited for visitors in the European Economic Area and the United Kingdom). Google Analytics runs only after you accept analytics through the consent banner. When it runs, it sets the cookies _ga and _ga_G-C51M0K4Z0Y in your browser, which let it distinguish visitors across visits.

Google Analytics automatically collects the standard events page_view, first_visit, session_start, and user_engagement. Page views are recorded when you open a page or navigate to another page on this site; the other events are automatic. Enhanced Measurement is OFF, so scrolls, outbound clicks, site search, video engagement, and file downloads are NOT collected.

The information collected by default is the page URL, the referring page URL, the page title, browser language, device category, and browser type. Because granular location and device collection is enabled, Google Analytics may collect more detailed location and device information, including city-level location and device/browser details — such as device brand, model, and name, browser user-agent string and version details, operating-system and platform versions, and screen resolution — where that information is available for a given visitor.

Page URLs on this site are fixed addresses that contain no user-entered information. Page views record the page address only, with no query part and no fragment part. The referring page is recorded only as its origin address (for example, https://example.com), or not at all for direct visits; full referring addresses, including any path or query part, are never recorded. Later page views record the previous page on this site as the referrer, not the original external referrer.

Google Analytics does not log or store IP addresses. An IP address is used only to derive approximate location (city or region level) and is then discarded. Google Analytics collects and processes this data under Google's terms for Google Analytics and Google's Privacy Policy. Google Signals and advertising personalisation are disabled, and this data is not used for advertising. Data is retained for 2 months and is not kept longer because of new activity.

Google Analytics never receives your PDF files, their contents, file names, signatures, passwords, or document text. Tool input values and uploaded-file metadata are not sent, and the implementation is configured to avoid directly identifying information: no name, email, or contact details are sent.

Consent: every visitor is asked first, wherever they are visiting from. Before you choose, no analytics script loads, no analytics cookies are set, and no analytics requests are sent. Your choice is stored in your browser's local storage, not in a cookie. Withdrawing stops future analytics collection: the page reloads with analytics fully blocked, and analytics cookies are removed where possible. This consent approach is Basic Consent Mode: no tag loads and no cookieless analytics pings are sent before consent.

You can also opt out of Google Analytics entirely with Google's opt-out browser add-on (https://tools.google.com/dlpage/gaoptout). That add-on applies to Google Analytics only: it is not a consent mechanism for this site, it does not block other services or hosting logs, and it does not withdraw a consent choice you already made here — use Cookie settings in the footer for that.

5. File size and safety

Files are limited to 50 MB each. Files are checked by content signature (magic bytes), not just by extension, and files that fail validation are rejected with a message. Processing happens locally, so a malicious file can at most fail in your own browser tab; never upload a file you do not trust, and never enter a password for a file you do not own or are not authorised to unlock.

6. Future server-processed tools

Tools on the roadmap that need a server (for example Office conversion or OCR) do not exist yet. If any future tool processes files on a server, its page will say so explicitly before you upload, including how long files are kept and when they are deleted. Until then, the statement in section 1 covers every working tool.

7. Contact

Privacy questions: [email protected].