Privacy at PDFPUMA

This page explains, in plain language, how PDFPUMA handles your documents and data as the service is built today.

Your documents

PDFPUMA's tools run in your browser. When you choose a file, your browser reads it into memory on your device and processes it there using open-source libraries (pdf-lib and Mozilla's PDF.js). The result is created on your device and saved by your browser.

• Your files, their names and their contents are not uploaded to PDFPUMA's servers.
• Nothing is stored after you close or reload the tab.
• Passwords you enter to open a protected PDF are used only in your browser.

PDFPUMA may offer optional cloud features in future (such as OCR). They will be clearly labelled before you use them, and this page will describe how they handle files before they launch.

If you create an account

You don't need an account to use the tools. If you create one, we store:

• Your email address and sign-in method, managed by Firebase Authentication (Google). Passwords are handled by Firebase and are never visible to PDFPUMA.
• An optional display name and your preferences.
• If you subscribe: your plan, subscription status and dates, and Stripe customer and subscription identifiers.
• If your plan includes them: tool settings you choose to save (for example, watermark text). These are settings, not documents.

Payments

Payments are handled by Stripe. PDFPUMA never receives or stores your card number. To prevent repeated free trials, we keep a one-way, keyed hash of the email address and card fingerprint used for a trial — it can't be turned back into your email or card details.

Usage statistics

To understand which tools are useful, PDFPUMA counts events such as “a merge was completed”. These are stored only as daily totals. Each event carries just the tool name and coarse categories — for example a file size range like “1–10 MB”, or an error type.

• No file names, document contents, IP addresses or account identifiers are recorded with these counts.
• No advertising or cross-site tracking cookies are used.
• If your browser sends a Global Privacy Control or Do Not Track signal, no usage events are sent. You can also switch them off in your account settings.

Separately, like most websites, our hosting provider (Google Cloud, via Firebase App Hosting) keeps standard web request logs — such as IP address, page requested and browser type — for security and operations. These never include your documents.

Where your data is stored

Your documents are never stored by us. The account and billing data described above is stored outside Australia:

• Google Cloud / Firebase (account database and website hosting) in Singapore; Firebase Authentication is a global Google service.
• Stripe (payments, subscriptions and invoices), which processes data in the United States and other countries.

By creating an account or subscribing, you acknowledge that this information is held overseas by these providers. We choose providers with strong security and contractual privacy protections, and we disclose only what's needed to provide the Service.

Access and correction

You can see and update your profile in your account, view invoices in the billing portal, and delete your account at any time. To request access to or correction of other personal information we hold, or to make a privacy complaint, use our contact form. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Deleting your data

You can delete your account at any time from your account page. This cancels any subscription immediately and deletes your profile, saved settings and billing record. Stripe retains its own invoice records as required by tax law, and the hashed trial ledger described above is kept to prevent abuse.

Security

See Security at PDFPUMA for how the service is protected.

Who we are and how to contact us

PDFPUMA is operated by Luxclean Gold Coast Pty Ltd (ABN 93 678 752 746), Queensland, Australia. It is responsible for the personal information described on this page. Contact us using our contact form.

Last updated 25 October 2026.