Skip to main content
Privacy By Design • GDPR & CCPA Aligned

Our Privacy Policy is Simple: We Never See Your Files

Your confidential documents never touch our servers. Every byte is processed locally within your web browser’s isolated sandbox.

Last Updated & Formally Reviewed: September 2026

Zero File Collection

Your documents never touch our servers. WebAssembly executes 100% inside your local web browser.

No Tracking Cookies

We do not profile your behavior, run advertising cookies, or deploy cross-site tracking pixels.

Instant Memory Purge

All file buffers are destroyed and garbage collected the moment your task completes or the tab closes.

GDPR & CCPA Aligned

Built in compliance with Art. 25 GDPR (Data Protection by Design and by Default) and California privacy standards.

Comprehensive Data Inventory

Full transparency regarding every category of data when you use iCreatePDF.

Data Classification
Uploaded to Us?
Where It Lives
Retention / Deletion
PDF Document Contents & Text
NO (0%)
Local Computer RAM
Immediate disposal upon task completion or tab close
Document Passwords & Encryption Keys
NO (0%)
Browser WebCrypto volatile memory
Cleared immediately following cryptographic operation
Personal User Account Information
NO (0%)
None (no registration or login required)
None
UI Preferences (Theme, Language)
NO (0%)
Browser localStorage & essential cookie
Persistent on device until cleared by user
Section 01

1. Architecture & Privacy by Design

iCreatePDF operates on a zero-upload, client-side execution paradigm. Unlike conventional PDF portals that send your tax documents, contracts, medical forms, and bank statements to remote cloud servers, our platform executes all document manipulation within your web browser via WebAssembly (WASM) and HTML5 Web Workers.

Key Guarantee: We maintain no centralized file storage, no cloud database of documents, and zero intermediate processing servers. We cannot access your files even if legally requested, because we do not have custody of them.
Section 02

2. Information We Never Collect

To protect user dignity and eliminate surveillance risk, we explicitly do not collect:

  • Document Content: Text, images, annotations, form field inputs, or metadata embedded within your PDFs.
  • Encryption Keys & Passwords: Passwords entered to unlock or encrypt PDFs are evaluated locally using the browser’s native WebCrypto APIs.
  • Personally Identifiable Information (PII): We do not require account registration, email addresses, phone numbers, or billing info.
  • Third-Party Advertising IDs: We do not deploy advertising tracking scripts or behavioral profilers.
Section 03

3. Local Storage & Client State

We use your browser’s localStorage and an essential first-party cookie solely for user interface ergonomics:

  • Theme Selection: Preserving your preferred Light Mode or Dark Mode view across sessions.
  • Language Preference: Remembering your selected localization (e.g. English, Spanish, Hindi, Nepali).
  • Transient Tool History (Optional): If you use our visual batch workflow creator, node configurations are stored locally on your device only.

You can purge this data at any time via your browser settings or on our Cookie Policy Page.

Section 04

4. Third-Party Infrastructure & CDN

When you visit iCreatePDF, your browser downloads static web assets (HTML, CSS, JavaScript, WebAssembly binaries, and web fonts) from our content delivery network (CDN). Like all standard web servers, the CDN automatically logs technical network metadata (IP address, user-agent, timestamp) strictly for DDoS mitigation, performance caching, and operational reliability. These server logs never contain file contents.

Section 05

5. Global Privacy Compliance (GDPR, CCPA, HIPAA)

Because iCreatePDF does not transmit, store, or process personal data on external servers:

GDPR (EU/EEA)

Complies with Article 25 (Data Protection by Design & Default). No cross-border data transfer occurs.

CCPA / CPRA

We do not sell, share, or monetize consumer personal data in any capacity.

HIPAA Suitability

No electronic Protected Health Information (ePHI) leaves the covered entity’s local device.

Section 06

6. Your Rights & Data Sovereignty

Under global privacy frameworks, you have rights to access, rectify, erase, or restrict processing of your data. Because iCreatePDF does not store user records or file contents, there is no centralized database to delete from — your data sovereignty is complete and maintained entirely in your own hands.

Section 07

7. Policy Inquiries & Data Protection Contact

For formal data protection queries, compliance verification, or questions regarding this Privacy Policy, please reach out to our team: