YOUR FILES. YOUR DEVICE.
Privacy, in plain English.
Your PDF stays in your browser. Account sign-in enables downloads; PDF processing stays local.
Last updated October 20, 2026
Your PDF files
PDF selection, processing, preview, and download happen on your device. The compressor does not upload PDF contents, filenames, or page previews to our servers. File bytes are held in browser memory while processing. Before sign-in, the original, compressed result and settings may be saved temporarily on your device in IndexedDB to restore your comparison after a redirect. Only a random resume identifier appears in the callback link, without PDF contents or filenames. Resume data is valid for one hour; expired data is removed on a later use. Replacing/removing the file, adjusting compression or starting over removes the corresponding saved workspace. Closing the page does not necessarily remove this local saved copy. Downloaded files are saved by your browser. Closing the page clears its working memory; keep your original PDF until you have checked the result.
Accounts and downloads
You do not need an account to compress a PDF or compare sizes. Signing in is required to download the result. If you register or sign in, account information travels over the network to the authentication service on Vercel and its PostgreSQL database on Neon. This is different from PDF processing. Account information can include your email address, display name, password hash for email registration, sign-in provider identifiers, and session records. Your plaintext password is not stored in the database.
Google sign-in
If Google sign-in is configured, choosing it connects you to Google and the authentication service. Google supplies the basic identity information allowed by the sign-in flow, such as your name, email address, and profile image. Your Google password is entered with Google, not into this website. Google handles its own connection data under its privacy policy.
Browser storage and sessions
Authentication uses session cookies to keep you signed in. These are necessary for account features and downloading. This version does not include advertising, analytics trackers, or a server-side history of your PDF files.
Hosting information
The website host and authentication server receive ordinary connection information, such as an IP address, requested URL, browser information, and request time. They may retain operational or security logs according to their configuration. This does not require receiving your PDF.
Managing and deleting your account
You can sign out to end your current session. Under “My account”, choose “Delete account”, type the requested confirmation and open the emailed link in the same browser while still signed in. The link is valid for one hour. Your profile, linked sign-in records and all sessions are then removed from the active database. This does not delete your Google account or local files. If you cannot access your account, contact us for help; we will verify your identity before intervening.
Retention
Account information is kept while your account exists. Sessions expire after seven days and may be renewed while you use your account. Verification and recovery links have limited validity; expiry does not necessarily mean every technical record is immediately erased. Request-rate-limit records are not a history of your PDFs.
When operational backups are enabled, they are encrypted and retained for up to seven days. A deleted account may therefore remain in an older backup until it expires. Deletions made after a backup must be reapplied before a restored service goes live. Snapshots and logs retained directly by providers follow their own settings and retention periods; contact us with questions.
Service providers
Vercel hosts the website and account endpoints; Neon stores account data; Brevo receives the recipient address and content needed to send verification, recovery and deletion emails. Google participates when you choose Google sign-in. Operational backups, if enabled, are stored encrypted in GitHub Actions. None of these services receives PDF contents through the compressor. Availability checks request service status only. No advertising or behavioral analytics tool is added.
Contact and data requests
For help or requests to access, correct or delete your account information, email zhihaosong168@gmail.com. Include the account email address, without sending your password, sign-in links or PDFs. Requests are handled after identity verification where necessary.
Before you leave
Check every compressed file before using it, especially documents with signatures, forms, fine text, or important legal or medical information. Your original remains on your device.
Compress a PDF locally ↗