Privacy Policy & Zero-Cloud Guarantee
Effective Date: January 1, 2026 • Last Reviewed & Updated: September 2026
Zero Server Uploads
Documents are processed 100% in your device's local browser memory via WebAssembly. Files never cross the network.
Zero Data Retention
We cannot view, store, read, or monetize your PDF contents, text redlines, contracts, or uploaded images.
GDPR & CCPA Compliant
Built on mathematical zero-knowledge privacy. No account required, no cross-site tracking, no third-party data sales.
1. Architectural Foundation & Zero-Knowledge Guarantee
At PdfCompare (accessible at https://pdfcompare.app), our core philosophical and architectural foundation is simple: the most secure data transfer is data that is never transferred at all.
Unlike conventional SaaS tools that transmit proprietary legal contracts, financial spreadsheets, and personal notes to remote cloud clusters for server-side processing, PdfCompare utilizes compiled WebAssembly (Wasm) binaries and client-side JavaScript. All parsing, text rendering, difference highlighting, and document generation occur strictly within the localized sandbox of your browser session.
2. Information We Never Collect or Access
- Document Content & Text: We never inspect, extract, or log the text, numbers, formulas, or metadata within your uploaded documents.
- Proprietary Graphics & Images: Any images, signatures, or logos embedded into your files remain inside browser RAM and are purged instantly when the tab is closed.
- Personal Identifiable Information (PII): We do not require usernames, passwords, phone numbers, or corporate credentials to use our comparison and conversion utilities.
- Document Redline Output: Difference reports and generated PDF outputs are created purely on your hardware.
3. Minimal Aggregated Telemetry & Server Logs
When you load static assets (HTML, CSS, JavaScript chunks) from our globally distributed Cloudflare Edge network, minimal non-identifying technical metadata is recorded automatically by standard HTTP web servers:
• Edge CDN Routing Details (Cloudflare Ray ID, country code, transit edge node)
• Device Type and User-Agent (for rendering compatibility optimization)
• Aggregated Web Vitals (Largest Contentful Paint, Cumulative Layout Shift)
This telemetry contains zero document payloads and is utilized strictly to defend against DDoS attacks and maintain 99.99% infrastructure uptime.
4. Cookies and Local Browser Storage
PdfCompare is intentionally designed to be cookie-minimal:
We do not use tracking cookies, behavioral ad-targeting beacons, or third-party marketing pixels (such as Facebook Pixel or Google Ads Remarketing). We may store temporary UI preference keys in your browser's localStorage (such as your chosen comparison viewing mode, dark/light theme preference, or font family defaults) so that your workflow settings persist across visits.
5. Compliance with Global Privacy Regulations
European Union GDPR (General Data Protection Regulation)
Under the GDPR, PdfCompare acts neither as a Data Controller nor as a Data Processor for your document contents because your files never touch our infrastructure. Your natural rights to confidentiality, data minimization, and privacy-by-design are physically guaranteed.
California Consumer Privacy Act (CCPA / CPRA)
We do not sell, rent, trade, or transfer consumer personal information to third parties. We do not participate in cross-contextual behavioral advertising networks.
Healthcare & Legal Confidentiality Suitability
Because document parsing occurs strictly inside client memory sandboxes and no document bytes are transmitted across the network, organizations subject to confidentiality mandates or HIPAA data handling rules can review internal documents without creating third-party cloud data custody liabilities.
6. Third-Party CDNs and Infrastructure Providers
Our application code and static bundles are delivered via Cloudflare, Inc. (San Francisco, CA). Cloudflare may process network-layer metadata to provide caching, TLS encryption termination, and web application firewall (WAF) mitigations under SOC-2 Type II certified data center controls.
7. Children's Online Privacy Protection (COPPA)
PdfCompare is a general audience developer and productivity utility. We do not knowingly collect or solicit personal information from children under the age of 13.
Looking for our iOS and iPadOS Native App Privacy Policy?
If you are using PDF Compare: Diff, Fill & Sign on iOS or iPadOS, please review our official App Store privacy disclosures and native device permissions policy:
8. Amendments to This Privacy Policy
We may periodically update this policy to reflect new web platform APIs or regulatory updates. When changes are published, the "Last Updated" date at the top of this document will be revised accordingly.
9. Privacy Inquiries and Data Protection Contact
For legal inquiries, compliance audits, or technical security questions regarding our client-side sandboxing, please contact our engineering team:
PdfCompare Privacy & Compliance Team
Email: hello@pdfcompare.app
Security Portal: https://pdfcompare.app/contact