policy
Privacy
We collect one thing that matters: the PDF you upload, and only so it can be watermarked. It is stored in a private directory under a random name, deleted automatically within 60 minutes whether or not you download the result, and never shared, sold, analysed or used to train anything. No account, no email address, no cookies, and no document content in our logs.
What we receive
We do not ask for a name, an email address or a password, because there is no account to create. Nothing you type into the watermark box is stored anywhere except in the page you are marking.
- The PDF itself, for the duration of the job
- An optional logo image, if you use an image watermark
- Your IP address, used only to enforce rate limits and the daily free-tier allowance
- Anonymous event counts such as 'a job finished' - no filenames, no document text
How long we keep it
| Data | Default retention | What removes it |
|---|---|---|
| Uploaded PDF | 60 minutes | Background sweeper, running every 5 minutes |
| Watermarked output | 60 minutes | Same sweeper; optionally deleted on download |
| Job and file records | 60 minutes | Same sweeper, with the files |
| Anonymous event counters | Kept in aggregate | Not linked to any file or job |
| Log lines | Per your host's log policy | No document content is ever written to them |
Retention is a configuration value, not a promise typed by hand. If it is changed, this page and the service change together.
What we never do
Processing happens inside the same service that received the upload. There is no third-party PDF API, no advertising network and no behavioural analytics on this site.
- We never read your document for any purpose other than processing the job
- We never share, sell or rent files or anything derived from them
- We never put filenames, document text or watermark wording into logs
- We never set cookies or drop third-party trackers on any page
- We never send your document to another service or a remote API
Analytics, in detail
Page and funnel measurement is first-party and cookie-free: the browser sends no client identifier, and events are stored in a separate table with no link to any file or job. Counts are bucketed, so a dimension cannot be used to single out one document. The purpose is to learn which pages people abandon, not to learn anything about them.
Your choices
The simplest control is the retention window: leave a tab open or close it, the file disappears on the same schedule. If you want a file removed sooner, close the job and the file becomes eligible for deletion at the next sweep, or immediately if you use the delete-after-download option. Questions about this page go to the support address published in the footer of every page.
Frequently asked questions
Does my PDF leave my device?
Yes. The file is uploaded to be processed - watermarking a PDF server-side is how this tool preserves the original quality, fonts and layout. It stays in a private directory under a random name and is deleted automatically within 60 minutes. If you would rather nothing left your device at all, desktop software is the alternative.
Can you see my document?
Not through the product. Files are stored under random names in a private directory, and no request path exposes them to anyone else. In practice nobody opens them: logs record that a job ran, never what was in it, and the sweeper deletes the file on schedule regardless.
Do you use cookies?
No. There are no cookies on this site - not for analytics, not for preferences, not for advertising. Rate limits and the free daily allowance are tracked from the request itself rather than from anything stored in your browser.
What happens if I close the tab before downloading?
The upload and any output are still deleted at the retention deadline. Nothing waits for you to come back, and no reminder, follow-up or recovery link exists, because no address was ever collected to send it to.