Privacy Policy

Effective Date: October 24, 2026 · Last Updated: October 24, 2026

Summary (non-binding): GhostPDF processes your documents exclusively within your browser. Your files are never transmitted to, received by, or stored on any server operated by or on behalf of GhostPDF. The Service is hosted on Cloudflare Pages and uses Cloudflare Web Analytics, a cookieless service that reports aggregate visitor statistics. We do not use cookies, advertising identifiers, or cross-site tracking technologies of any kind.

1. Introduction and Scope

This Privacy Policy (this “Policy”) sets forth the practices of the operator of GhostPDF (“GhostPDF,” the “Operator,” “we,” “us,” or “our”) with respect to the collection, use, processing, and disclosure of information in connection with the GhostPDF website, the browser-based PDF editing application made available thereon, and any related offline or cached instance thereof (collectively, the “Service”).

This Policy is incorporated by reference into, and forms an integral part of, the Terms of Service (the “Terms”). Capitalized terms used but not defined herein shall have the meanings ascribed to them in the Terms. By accessing or using the Service, you (“you,” “your,” or the “User”) acknowledge that you have read and understood this Policy.

2. Architecture of the Service; No Collection of User Content

The Service is delivered as a static, client-side web application. All parsing, rendering, editing, form completion, signature placement, optical character recognition (“OCR”), redaction, compression, page organization, splitting, and export of documents (collectively, “Processing”) is performed locally by the software executing within your web browser on your own device.

Accordingly, and notwithstanding anything to the contrary herein, the Operator does not collect, receive, access, view, transmit, store, retain, analyze, or otherwise process any document, file, image, signature, form value, recognized text, annotation, file name, or other content that you open, create, or modify using the Service (collectively, “User Content”). No User Content is uploaded to any server operated by or on behalf of the Operator at any time.

3. Information Stored Locally on Your Device

To provide certain functionality, the Service stores data exclusively within storage facilities provided by your browser on your device (“Local Storage”). Such data is never transmitted to the Operator. Specifically:

1. Autosaved session. The document you are currently editing, together with your annotations, form values, and edit history, is retained in your browser’s IndexedDB database so that your work may be restored following a page reload.
2. Local library. Documents that you affirmatively elect to save to the local library, together with preview thumbnails and associated metadata (e.g., file name, page count, and modification date), are retained in IndexedDB.
3. Preferences and technical flags. Limited technical values (for example, a flag indicating that a one-time data migration has completed) may be retained in your browser’s localStorage.
4. Offline cache. A service worker stores copies of the application’s static files (including program code, fonts, and OCR language data) in your browser’s Cache Storage so that the Service remains available without a network connection. Such cache contains no User Content.

Local Storage is subject to your exclusive control. You may delete it at any time by discarding the restored session from the start screen, deleting entries from the local library, or clearing the site data for the Service through your browser settings. The Operator has no ability to access, recover, or restore Local Storage, and shall bear no responsibility for any loss thereof.

4. Information Processed by Third Parties

4.1 Hosting Provider

The static files comprising the Service are hosted on, and delivered by, Cloudflare Pages, a service of Cloudflare, Inc., a Delaware corporation headquartered in the United States (together with its affiliates, “Cloudflare” or the “Hosting Provider”), which operates a global content delivery network. As an inherent incident of transmitting web content over the Internet, the Hosting Provider may automatically receive and log certain technical information transmitted by your browser, which may include your Internet Protocol (“IP”) address, the date and time of the request, the resource requested, the referring URL, and your browser’s user-agent string (collectively, “Technical Data”). Such Technical Data is processed by the Hosting Provider for purposes of delivering, securing, and maintaining its network, in accordance with the Cloudflare Privacy Policy. The Operator does not use Technical Data to identify, profile, or track Users, and does not combine Technical Data with any other information.

4.2 Web Analytics

The Operator uses Cloudflare Web Analytics, a service provided by Cloudflare, to obtain aggregate, statistical information regarding visits to the Service. When you load a page of the Service, a measurement script served by Cloudflare may transmit to Cloudflare certain information concerning that page view, which may include the URL of the page visited, the referring URL, your browser’s user-agent string, the approximate country from which the request originated (as derived from your IP address at the time of the request), and page-load performance metrics (collectively, “Analytics Data”).

Cloudflare Web Analytics does not set or read cookies, does not use localStorage or any other client-side storage to identify visitors, and, according to Cloudflare, does not “fingerprint” individuals by means of their IP address, user-agent string, or any other data. The Operator receives Analytics Data solely in aggregated form (for example, total page views, top pages, referrers, countries, browsers, and performance figures) and has no means of attributing Analytics Data to any identified or identifiable individual. Analytics Data never includes User Content. The measurement script operates only on the pages of the Service and has no access to the documents you open or edit, all of which remain within your browser. The script is not loaded while the Service is used offline, and you may prevent its operation at any time by means of a content-blocking browser extension, without any effect on the functionality of the Service.

4.3 Third-Party Websites

The Service contains hyperlinks to third-party websites (for example, the websites of open-source projects incorporated into the Service). Such links are provided solely as a convenience. The Operator does not control, and is not responsible for, the privacy practices of any third party, and the inclusion of any link does not imply endorsement thereof. You are encouraged to review the privacy policy of each website you visit.

5. Cookies, Analytics, and Tracking Technologies

The Service does not set or read cookies, and does not employ advertising pixels, software development kits, device fingerprinting, session replay, cross-site tracking, advertising identifiers, or any advertising or remarketing service. The sole analytics technology used by the Service is the cookieless Cloudflare Web Analytics measurement script described in Section 4.2. Because the Service does not track Users over time or across third-party websites or online services, it does not respond differently to “Do Not Track” browser signals or Global Privacy Control signals; however, the Service’s default behavior is consistent with the preferences such signals express.

6. Correspondence

If you elect to contact the Operator by electronic mail, the Operator will receive and process your e-mail address, any name you provide, the contents of your message, and any attachments you choose to include (collectively, “Correspondence Data”). Correspondence Data is used solely to respond to your inquiry, to maintain a record of the communication, and to comply with applicable legal obligations. Correspondence Data is handled through a third-party encrypted e-mail service provider and is retained only for so long as is reasonably necessary for the foregoing purposes, after which it is deleted. You should not transmit any confidential document or sensitive personal information to the Operator by e-mail.

7. Legal Bases for Processing

To the extent that the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the GDPR as incorporated into the law of the United Kingdom (“UK GDPR”), or any analogous law applies, the Operator relies upon the following legal bases: (i) with respect to Correspondence Data, the Operator’s legitimate interests in responding to inquiries directed to it (Art. 6(1)(f)) and, where applicable, compliance with legal obligations (Art. 6(1)(c)); (ii) with respect to Technical Data, the legitimate interests of the Operator and the Hosting Provider in the secure and reliable delivery of the Service (Art. 6(1)(f)); and (iii) with respect to Analytics Data, the Operator’s legitimate interests in measuring the aggregate usage and performance of the Service in order to maintain and improve it (Art. 6(1)(f)), which interests the Operator has determined are not overridden by your interests or fundamental rights and freedoms, having regard to the cookieless, aggregated, and non-identifying nature of such processing. Data held in Local Storage is processed solely by you, on your device, and is not processed by the Operator.

8. No Sale or Sharing of Personal Information

The Operator does not sell, rent, lease, trade, or otherwise disclose personal information for monetary or other valuable consideration, and does not “sell” or “share” personal information, or process personal information for “targeted advertising” or “cross-context behavioral advertising,” as such terms are defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”), or any comparable state privacy law. The Operator has not done so in the preceding twelve (12) months. The Operator does not collect sensitive personal information as defined under the CCPA. Cloudflare processes Technical Data and Analytics Data on the Operator’s behalf in its capacity as a service provider or processor, and such processing does not constitute a “sale” or “sharing” of personal information.

The Operator may disclose Correspondence Data only (a) where required by applicable law, regulation, subpoena, court order, or other legal process; (b) to establish, exercise, or defend legal claims; or (c) to protect the rights, property, or safety of the Operator, its Users, or the public, in each case to the minimum extent necessary.

9. Your Rights

Subject to applicable law, you may have the right to (i) request access to, or a copy of, personal information concerning you; (ii) request rectification of inaccurate personal information; (iii) request erasure of personal information; (iv) object to, or request restriction of, processing; (v) request data portability; (vi) withdraw consent, where processing is based upon consent; and (vii) lodge a complaint with a competent supervisory authority. The Operator will not discriminate against you for exercising any such right.

Because the Operator does not collect User Content and does not maintain accounts or user profiles, the Operator will, in most cases, hold no personal information concerning you other than Correspondence Data, if any. Requests may be submitted to the address set forth in Section 15. The Operator may require reasonable information to verify your identity before acting upon a request, and will respond within the period prescribed by applicable law. Because Analytics Data is made available to the Operator only in aggregated form, the Operator is unable to locate, access, or delete Analytics Data relating to any particular individual. Requests concerning Technical Data or Analytics Data held by Cloudflare may be directed to Cloudflare in accordance with its privacy policy.

10. Data Security

The Service is delivered exclusively over encrypted HTTPS connections, and its architecture is designed so that User Content never leaves your device. Nevertheless, the security of Local Storage depends upon the security of your device, operating system, browser, and browser profile, which are outside the Operator’s control. You are solely responsible for safeguarding your device and for clearing Local Storage when using a shared or public device. No method of electronic storage or transmission is completely secure, and the Operator cannot guarantee absolute security.

11. Data Retention

The Operator retains no User Content. Local Storage persists on your device until deleted by you or by your browser. Correspondence Data is retained in accordance with Section 6. Technical Data and Analytics Data are retained by Cloudflare in accordance with its own retention policies; the Operator retains only the aggregated statistical reports made available to it through Cloudflare Web Analytics.

12. International Transfers

The Service is delivered through Cloudflare’s global network, and Cloudflare, a company headquartered in the United States, and the Operator’s e-mail service provider may process Technical Data, Analytics Data, and Correspondence Data, respectively, outside your country of residence, including in jurisdictions that may not afford an equivalent level of data protection. Where required by applicable law, such transfers are subject to appropriate safeguards, such as the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission.

13. Children’s Privacy

The Service is not directed to children under the age of thirteen (13), or such higher age as may be prescribed by applicable law in your jurisdiction (including sixteen (16) in certain member states of the European Economic Area). The Operator does not knowingly collect personal information from children. If you believe that a child has provided personal information to the Operator, please contact us and we will delete such information.

14. Amendments to this Policy

The Operator reserves the right, in its sole discretion, to amend, modify, or replace this Policy at any time. Any amendment shall become effective upon publication of the revised Policy on the Service, as indicated by the “Last Updated” date set forth above. Your continued access to or use of the Service following the publication of any amendment shall constitute your acceptance thereof. Where required by applicable law, the Operator will provide additional notice of material changes.

15. Contact Information

Questions, comments, requests, or complaints regarding this Policy or the Operator’s privacy practices may be directed to: