Privacy Policy
Privacy is the product. Everything on this page is a design property of how pdfmcp is built — not a promise bolted on afterwards.
Web tools never upload
Every tool on this website runs in your browser, on your device. Your file is never transmitted to our servers — there is nothing to intercept, store or leak.
Server files die within the hour
Files sent to the API/MCP server sit in an encrypted temporary volume and are auto-deleted within 1 hour of the job finishing (or 15 minutes after you download the result, whichever comes first). A sweeper enforces this; deletion is tested, not just promised.
No content logging, ever
Our logs contain only operational metadata: operation name, file size, page count, duration, status, and a hash of the API key. Never file names, never extracted text, never document content.
No trackers on your documents
No third-party analytics, ads or fingerprinting scripts run on tool pages. The only cookies are a sign-in session (dashboard only) and your own theme preference, stored on your device.
Accounts hold almost nothing
Your email address is stored encrypted; your API keys are stored only as salted hashes (a stolen database cannot produce a usable key). Login codes are hashed, single-use and expire in 10 minutes. Delete your account and all of it is wiped immediately.
The honest edges
Our IP-level abuse controls and the web proxy keep short-lived access logs (rotated within 7 days) — that's how we stop attacks. Metadata removal tools strip document metadata, but pixel-embedded invisible watermarks (like SynthID) live in image data itself and no metadata tool removes them; we say so on the tool page instead of pretending.
The short version
Web tools: your file never leaves your device. API/MCP: your file is deleted within an hour and its content is never logged. Accounts: email encrypted, keys hashed, nothing else kept. If that ever changes, this page changes first — see also the Terms of Service and Acceptable Use Policy. Questions or data requests (including full account deletion, which wipes everything immediately): hello@pdfmcp.org.