policy

Privacy

We collect one thing that matters: the PDF you upload, and only so it can be watermarked. It is stored in a private directory under a random name, deleted automatically within 60 minutes whether or not you download the result, and never shared, sold, analysed or used to train anything. No account, no email address, no cookies, and no document content in our logs.

What we receive

We do not ask for a name, an email address or a password, because there is no account to create. Nothing you type into the watermark box is stored anywhere except in the page you are marking.

  • The PDF itself, for the duration of the job
  • An optional logo image, if you use an image watermark
  • Your IP address, used only to enforce rate limits and the daily free-tier allowance
  • Anonymous event counts such as 'a job finished' - no filenames, no document text

How long we keep it

Retention, as configured in the running service
DataDefault retentionWhat removes it
Uploaded PDF60 minutesBackground sweeper, running every 5 minutes
Watermarked output60 minutesSame sweeper; optionally deleted on download
Job and file records60 minutesSame sweeper, with the files
Anonymous event countersKept in aggregateNot linked to any file or job
Log linesPer your host's log policyNo document content is ever written to them

Retention is a configuration value, not a promise typed by hand. If it is changed, this page and the service change together.

What we never do

Processing happens inside the same service that received the upload. There is no third-party PDF API, no advertising network and no behavioural analytics on this site.

  • We never read your document for any purpose other than processing the job
  • We never share, sell or rent files or anything derived from them
  • We never put filenames, document text or watermark wording into logs
  • We never set cookies or drop third-party trackers on any page
  • We never send your document to another service or a remote API

Analytics, in detail

Page and funnel measurement is first-party and cookie-free: the browser sends no client identifier, and events are stored in a separate table with no link to any file or job. Counts are bucketed, so a dimension cannot be used to single out one document. The purpose is to learn which pages people abandon, not to learn anything about them.

Your choices

The simplest control is the retention window: leave a tab open or close it, the file disappears on the same schedule. If you want a file removed sooner, close the job and the file becomes eligible for deletion at the next sweep, or immediately if you use the delete-after-download option. Questions about this page go to the support address published in the footer of every page.

Frequently asked questions

Does my PDF leave my device?

Yes. The file is uploaded to be processed - watermarking a PDF server-side is how this tool preserves the original quality, fonts and layout. It stays in a private directory under a random name and is deleted automatically within 60 minutes. If you would rather nothing left your device at all, desktop software is the alternative.

Can you see my document?

Not through the product. Files are stored under random names in a private directory, and no request path exposes them to anyone else. In practice nobody opens them: logs record that a job ran, never what was in it, and the sweeper deletes the file on schedule regardless.

Do you use cookies?

No. There are no cookies on this site - not for analytics, not for preferences, not for advertising. Rate limits and the free daily allowance are tracked from the request itself rather than from anything stored in your browser.

What happens if I close the tab before downloading?

The upload and any output are still deleted at the retention deadline. Nothing waits for you to come back, and no reminder, follow-up or recovery link exists, because no address was ever collected to send it to.