Privacy policy

Summary

Most PDF Toucan tools process your files entirely inside your web browser. Those files are never transmitted to us. A small number of tools (compress, repair, OCR, PDF/A conversion and conversions to or from Word, Excel, PowerPoint and HTML) send the file to our servers for processing. We never store those files: they are held only in memory (RAM) while the job runs and are deleted as soon as your browser has downloaded the result. If you leave before downloading, they are deleted automatically after 10 minutes at the latest.

We do not require an account, we do not read the content of your documents, and we do not sell personal data. Advertising on the site is provided by Google; in regions that require it, advertising cookies are only set after you give consent.

Files processed in your browser

Tools marked as running in your browser (for example Merge, Split, Rotate, Edit, Sign, Protect, Unlock, Redact, JPG to PDF and PDF to JPG) use a local processing engine. The file stays in your device's memory and is discarded when you close or reload the page. No copy is uploaded, cached or logged by us.

Files processed on our servers

For server-side tools, your file is transmitted over an encrypted connection (HTTPS) to servers we operate in the European Union. It is processed in memory (a RAM disk), never written to permanent storage, never backed up and never used for any other purpose. The input is deleted as soon as processing ends and the result is deleted the moment it has been downloaded (at the latest after 10 minutes). Our servers keep only anonymous counters about jobs (tool, file size, page count, duration, success or failure) for capacity planning; file names and contents are never logged.

Information we collect

Server logs: like most websites, our servers record IP addresses, browser type, pages visited and timestamps. Logs are used for security and abuse prevention only. They are kept in a small rotating buffer that is overwritten automatically, and they never contain file names or file contents.

Preferences: settings such as your chosen theme, language suggestion dismissal and favorite tools are stored in your browser's local storage and never sent to us.

Contact: if you email us, we keep the correspondence for as long as needed to handle your request.

Advertising and cookies

PDF Toucan is funded by advertising served by Google AdSense. Google and its partners may use cookies or similar technologies to serve ads based on your visits to this and other websites. You can opt out of personalised advertising in Google's Ads Settings, and you can learn how Google uses data from partner sites at https://policies.google.com/technologies/partner-sites.

If you are in the European Economic Area, the United Kingdom or Switzerland, a consent dialog asks for your choice before any advertising or analytics cookie is set. You can change your choice at any time using the Cookie settings link in the footer.

Analytics

If analytics is enabled, we measure site usage with Google Analytics 4 (page views, tool usage counts, country and device type). Where consent is required, analytics cookies are only set after you accept them.

Service providers

A few providers process data on our behalf: Cloudflare, Inc. delivers the site and filters attacks, so every request passes through its network (IP address and request data); Netcup GmbH hosts our servers in the European Union; Google provides advertising (AdSense) and, when enabled, analytics. None of them receives the contents of your files: browser tools never upload them, and server tools process them in memory on our own server.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data we hold, to object to processing, or to lodge a complaint with a supervisory authority. Because we do not hold accounts or your files, such requests usually concern server logs or correspondence. Write to hello@pdftoucan.com and we will respond within 30 days. If you are in Türkiye, Article 11 of the Personal Data Protection Law (KVKK) gives you the same rights, and you may complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu). The data controller is the site operator named on the contact page.

Children

The site is not directed at children under 16 and we do not knowingly collect personal data from them.

Changes

We may update this policy as the service evolves. The date at the bottom of this page shows the latest revision. Material changes will be announced on the site.