Privacy Policy

Last updated: July 18, 2026

        The essential: OléPDF processes your PDF documents 100% in your browser. Your files are never uploaded to any server. We have no access to your documents or the data they contain.
      

1. Data Controller

The data controller for personal data collected through this website is the entity identified in the Legal Notice.

Privacy contact: support@olepdf.com

2. What Data We Collect

OléPDF is designed to collect the minimum amount of data possible:

Data	When Collected	Purpose
Email address	When purchasing a license	License delivery, service communications
Subscription status	When activating a paid plan	Managing access to Pro features
License key	When activating the license	Access verification
Payment data	When making a purchase	Payment processing (handled by Stripe)
Anonymous usage statistics	When visiting the website, opening the app, clicking a primary CTA, or processing a PDF	Service improvement and aggregate funnel measurement. We record: page path, landing path, referrer domain, source/medium when present, device type, browser, operating system, approximate country or region when supplied directly by the hosting infrastructure, and anonymous event counts. OléPDF does not query external geolocation services. No document content, file names, personal identifier, or raw IP address is stored.
IP address (hashed)	On each API request	Abuse protection (rate limiting). An irreversible hash is stored, never the actual IP. Automatically deleted after the rate-limiting window (a few minutes at most).
Certificate status identifier	When validating a signature whose certificate publishes OCSP or CRL	Transporting the OCSP request (issuer hashes and serial number) or downloading the published CRL. Neither the PDF nor certificate is sent, and the response is not retained.

Data We Do NOT Collect

PDF documents: Never uploaded to any server. All processing is local.
Document content: We have no access to the text, images, or data in processed PDFs.
Detected data: Personal data identified by the detection engine never leaves the browser.
Third-party cookies: We do not use third-party cookies or advertising.

3. Legal Basis for Processing

Contract performance (Art. 6.1.b GDPR): Processing necessary for license and subscription management.
Legitimate interest (Art. 6.1.f GDPR): Service communications, product improvements, anonymous usage statistics, and abuse protection.
Consent (Art. 6.1.a GDPR): Optional marketing communications (if requested by user).

4. Data Recipients

Stripe: Payment processor. Manages payment data and billing. Stripe Privacy Policy.
Certification and timestamp authorities: When revocation validation or a timestamp is requested, they receive only the OCSP identifier, CRL URL, or required cryptographic digest; they never receive the PDF.

We do not share the document or its content with any third party.

5. Data Retention

License data: While the license is active, plus the legally required period.
Billing data: The period required by applicable tax legislation (minimum 4 years in Spain).
PDF document data: Not applicable - never stored outside the user's browser.
Usage statistics: Anonymous aggregated data, retained indefinitely.
Rate-limiting data: Automatically deleted after the rate-limiting window.
OCSP/CRL queries: Transported in memory and not stored.

6. User Rights

Under the GDPR (EU Regulation 2016/679), you have the right to:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data ("right to be forgotten").
Restriction: Request restriction of processing in certain circumstances.
Portability: Receive your data in a structured, commonly used format.
Objection: Object to processing based on legitimate interest.

To exercise these rights, email support@olepdf.com.

You have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Cookies

OléPDF uses only essential technical cookies for application functionality:

Language preference: Stores the user's selected language (localStorage).
License status: Stores the activated license key (localStorage).
Theme preference: Stores light/dark mode preference (localStorage).
Document session: Temporarily stores working session state (IndexedDB).

We do not use analytics, advertising, or third-party tracking cookies. We do use limited first-party telemetry for anonymous audience measurement and product improvement, but it does not store analytics identifiers in browser storage and does not transmit document content to our servers.

8. Security

OléPDF's 100% client-side architecture is the primary security measure: since no server processes documents, there is no risk of document data leakage. License data is protected through encrypted connections (HTTPS) and stored securely.

9. International Transfers

Payment data is processed by Stripe, which may use infrastructure outside the EEA. Stripe complies with appropriate safeguards under Art. 46 GDPR. PDF documents never leave the user's browser and are therefore not subject to any international transfer.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Changes will be posted on this page with the updated date. We recommend reviewing this page periodically.

11. Contact

For any privacy queries: support@olepdf.com