This policy explains what information EddiesPDF ("we", "us") collects when you use eddiespdf.com, why we collect it, who we share it with and what choices you have. We've tried to write it plainly. If anything is unclear, contact us.
The short version
- Almost every tool runs in your browser. The files you work on are not uploaded to us, except when you use Request signature or publish a form, which need a server to work.
- An account is optional. If you create one, we store your name and email address.
- We count how the tools are used, without names, file contents or file names.
- The site is funded by ads from Google AdSense. Advertising cookies are only used if you agree to them.
- We don't sell your personal information.
Who is responsible
EddiesPDF is responsible (the "data controller") for the personal information described in this policy. You can reach us at EP@eddiespdf.com or through the contact page.
Your files
When you use a tool, your browser downloads the tool's code from our site and processes your file on your own device. The file is not sent to our servers. We can't see it, and we don't keep it.
Some tools keep data in your browser so they can work smoothly: the file you're editing, signatures and images you choose to save, templates, and (for signed-in users) a copy of recently processed files for up to 10 minutes. This stays on your device. The Cookie Policy lists everything stored there.
There are three exceptions, and each one only happens when you choose to use the feature:
Request signature
When you send a document for signature, we store:
- the PDF, in Vercel Blob storage;
- your name and email address, and the name and email address of each recipient;
- where the fields are placed, what each recipient enters (such as their name, the date, and an image of their signature) and when they sign.
We use this to show the document to your recipients, send them the request and reminders by email, notify you as people sign, and let everyone download the completed document. Recipients' details are provided by you, so please only add people who expect to receive the request.
Published forms
When you publish a form for others to fill in, we store the form PDF in Vercel Blob storage, and your email address in encrypted form so we can send you submissions. When someone fills in your form, the completed PDF is stored in Vercel Blob storage and the submitter's name and email address, if the form asks for them, are stored in encrypted form. A form can receive up to 1,000 submissions.
Google Drive
If you open a file from Google Drive or save a result to it, your browser talks directly to Google with the permission you give it. We only ask for access to files you pick or create with EddiesPDF (the "drive.file" permission), not your whole Drive. The file goes between Google and your browser; it does not pass through our servers.
Information we collect
If you create an account
- Your name and email address, and the date you created the account.
- Your password, which is handled by Google Firebase Authentication. We never see or store it in readable form.
- Whether you've unsubscribed from product update emails.
Your account dashboard, recent activity, usage counters and profile picture choice are stored in your own browser, not on our servers.
When you sign in
We email you a one-time code to confirm your address. The code is never stored. If you choose "Remember this device", your browser keeps a signed token for 30 days.
If you rate EddiesPDF
- The number of stars you give, and the comment and first name if you choose to add them, plus the language the site was shown in.
- A one-way hash of a random identifier kept in your browser. It means one browser has one rating, and rating again replaces it. It isn't linked to your account.
Comments are only published on the site after we've read them, with the first name you gave (or "EddiesPDF user" if you left it blank). Please don't put personal details in a comment.
When you contact us
We receive your email address and your message. Messages sent through the contact form are delivered to our support inbox, which is hosted by Google (Gmail).
Usage and error information
To understand which tools are used and to find bugs, the site sends us:
- Tool usage counts: that a tool finished a job, and, for Compress PDF, how many bytes were saved. No file contents, file names or account details are included.
- Daily visitor counts: a random identifier for your browser (or your account ID if you're signed in) is sent once a day. We store only a one-way hash of it, which we use to count each visitor once per day. If you reject analytics in Cookie settings, this isn't sent at all.
- Error reports: when a tool fails, the error message, technical details of where in the code it happened, the page address, and your browser's user agent (its name and version). These never include file contents.
Information our providers process
Like every website, ours receives your IP address when your browser connects to it. We use it briefly in memory to limit repeated requests (for example, too many sign-in attempts) and don't store it ourselves. Our hosting provider, Vercel, processes IP addresses to deliver the site and keeps standard request logs for a limited time under its own policies.
Why we use your information (legal bases)
If you're in the European Economic Area, the UK or a country with similar laws, we rely on these legal bases:
- To provide the service you asked for (contract): your account, sign-in codes, signature requests, published forms, and replying to your messages.
- Legitimate interests: keeping the site secure, preventing abuse, fixing errors, counting tool usage to decide what to improve, and sending occasional product update emails to account holders (you can unsubscribe from these with one click in any of them).
- Consent: personalised advertising and analytics cookies, where the law requires consent. You can withdraw consent at any time in Cookie settings.
- Legal obligations: where we have to keep or disclose information by law.
Advertising
EddiesPDF shows ads from Google AdSense. With your agreement, Google and its partners use cookies and similar technologies to show ads based on your visits to this and other websites, and to measure them. Every visitor is asked first: until you accept advertising cookies, they stay off and Google can only show ads that don't rely on them. You can change your choice at any time in Cookie settings.
You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and manage ad personalisation in your Google account at adssettings.google.com.
Who we share information with
We don't sell your personal information or share it for anyone else's own marketing. We use these service providers to run the site. Each processes data only as needed to provide its service to us:
- Vercel Inc. (United States): hosting, and file storage for signature requests and published forms.
- Google LLC / Google Ireland Ltd: Firebase Authentication and Cloud Firestore (accounts and stored requests), Google AdSense (ads), Google Drive (only when you use it), Google Fonts (the site's typeface is loaded from Google's servers), and Gmail (our support inbox).
- Resend (United States): sending emails, such as sign-in codes and signature notifications.
- jsDelivr: when you first use OCR with a language, your browser downloads the recognition engine and language data from this public content network.
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a sale or reorganisation of the service, in which case this policy would continue to apply to your information.
International transfers
Our providers are mainly based in the United States, so your information may be processed outside your country. Where data from the EEA or UK is transferred, our providers rely on recognised safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep information
- Account information: until you delete your account. Deleting it in Settings removes your profile, your email preferences and your sign-in account immediately, and clears what this browser kept for the account.
- Signature requests and published forms: stored until they're no longer needed to provide the feature. If you want a request or form removed sooner, contact us from the email address you used and we'll delete it.
- Contact messages: as long as needed to deal with your message and any follow-up.
- Daily visitor hashes and usage counts: kept as part of our statistics. They can't be used to identify you.
- Error reports: until we've investigated and cleared them.
- Ratings and comments: until we remove them, or you ask us to. To have yours removed, contact us and tell us roughly when you left it and what it said.
- Data in your browser: until you delete it, sign out, or clear the site's data. Recent file copies are removed after 10 minutes.
Your rights
Depending on where you live, you may have the right to:
- get a copy of the personal information we hold about you;
- have it corrected or deleted;
- object to, or ask us to restrict, how we use it;
- receive it in a portable format;
- withdraw consent at any time, without affecting what happened before;
- complain to your local data protection authority.
You can update your name and delete your account yourself in Settings. For anything else, email EP@eddiespdf.com from the address on your account. We'll reply within one month. We won't treat you differently for using your rights.
If you're a California resident: we don't sell personal information, and we don't "share" it for cross-context behavioural advertising except through Google AdSense as described above, which you can turn off in Cookie settings.
Children
EddiesPDF is not directed at children. You must be at least 13 years old, or older if the law in your country requires it, to create an account. If you believe a child has given us personal information, contact us and we'll delete it.
Security
We protect information with encryption in transit (HTTPS), restricted database access and encryption of sensitive form data. See Security for details. No system is completely secure, so please use a strong, unique password.
Changes to this policy
When we change this policy, we'll update the date at the top of this page. If a change significantly affects how we use your personal information, we'll tell account holders by email or with a notice on the site before it takes effect.
Contact
Questions about this policy or your data: EP@eddiespdf.com, or use the contact page.
