Your Privacy is Our
Top Priority

1 Overview & Architectural Principles

Welcome to PDFMaster (pdfmaster.co.in). This Privacy Policy explains our uncompromising commitment to user privacy and provides complete technical disclosure regarding how data is handled across our platform. By accessing PDFMaster, using any of our tools, or subscribing to our updates, you acknowledge the terms outlined in this document.

PDFMaster provides a complete suite of browser-based document utilities including:

• PDF Editor & Annotator — Draw, type, highlight, erase, sign, and edit PDFs directly in your browser.
• PDF Viewer — High-performance client-side document reading and navigation.
• Compress PDF — Multi-tier document compression optimized for memory-constrained devices.
• Photo to PDF — Convert single or multi-image galleries into unified PDF documents.
• PDF to Photo (JPG/PNG) — Extract high-resolution images from PDF pages.
• Split PDF — Extract custom page ranges or separate individual pages into independent files.
• PDF Compiler (Merge PDF) — Combine multiple PDF documents into a single consolidated file.
• Delete PDF Pages — Remove unwanted pages cleanly from existing documents.
• Rotate PDF — Correct document orientation page-by-page or globally.
• PDF Page Reorder — Rearrange page order interactively with drag-and-drop ease.
• PDF Metadata Viewer & Remover — Inspect and sanitize document metadata (author, title, creation date, software).
• Watermark PDF — Add custom text watermarks with opacity and rotation controls.

The fundamental architectural principle of PDFMaster is that all file operations, rendering, parsing, and mutations execute 100% locally within your client browser. Your documents, photos, forms, and signatures never leave your device.

2 Data Classification: What We Collect vs. What We NEVER Collect

To make data boundaries transparent, the table below provides a comprehensive classification of all data types encountered on PDFMaster:

Information We NEVER Collect, View, or Store

• Document contents: We never inspect, read, copy, or transmit the text, images, drawings, or vector paths contained inside your files.
• Original file names or paths: We strip all original file names (e.g., tax_return_2026.pdf) before sending operational metrics, retaining strictly the file extension (e.g., PDF) for format analytics.
• User account credentials: There are no user accounts, passwords, or login walls on PDFMaster.
• Financial or payment information: PDFMaster is completely free. We never request credit cards, bank accounts, or billing information.
• Precise GPS coordinates: We do not request or access browser device geolocation coordinates (GPS/Wi-Fi positioning).

3 100% On-Device File Processing & Session Recovery

Every single tool on PDFMaster is engineered to operate exclusively inside your web browser using modern Web APIs, client-side JavaScript, WebAssembly (WASM), HTML5 Canvas, and Web Workers.

How In-Browser Execution Protects You

When you select or drag-and-drop a document into PDFMaster, the file is read directly into your device's local memory (RAM) via standard browser FileReader or ArrayBuffer APIs. When you merge, compress, split, annotate, or convert documents, your own CPU and GPU perform the mathematical calculations. The resulting output file is synthesized directly in memory as a binary Blob and passed directly to your browser's download manager. No remote server is ever involved in opening, processing, or saving your files.

Client-Side Disaster Session Recovery (IndexedDB)

Accidental browser tab closures, power outages, system restarts, or memory crashes shouldn't cost you hours of work. To provide resiliency:

• All tools on PDFMaster such as PDF Editor, Split PDF, Photo to PDF, and Compress PDF automatically maintain a temporary working snapshot buffer inside your browser's local IndexedDB storage.
• If your session is interrupted, returning to the tool offers an instantaneous one-click restoration option.
• Sandbox Isolation: IndexedDB is an isolated, sandboxed database built directly into your web browser. Under modern web security models (Same-Origin Policy), this storage is strictly inaccessible to third-party domains and cannot be queried by remote servers.
• Complete User Control: You can purge all session recovery records at any moment by clicking the "Clear" or "Reset" button inside the tool, by clearing site cookies and storage in your browser settings, or by using Incognito / Private browsing mode (which deletes all IndexedDB databases automatically when the window is closed).

Complete Offline Functionality

Because all processing engines, stylesheets, fonts, and scripts are locally hosted and cached via Service Worker caching, PDFMaster tools continue to operate flawlessly even when your device is completely disconnected from the internet.

4 Operational Telemetry & Performance Analytics

Executing computationally intensive tasks (such as PDF compression, high-resolution rendering, and multi-document compilation) entirely within client browser memory requires continuous monitoring to prevent browser slowdowns and crashes, particularly on low-memory mobile devices.

To maintain service reliability and optimize tool speed, PDFMaster collects high-level, anonymous operational metrics upon successful tool execution.

What Operational Telemetry Includes

Telemetry events are non-blocking, lightweight, and strictly restricted to aggregate performance indicators:

• Tool Name: The specific utility executed (e.g. Compress PDF, Merge PDF, Photo to PDF).
• Processing Duration: Elapsed calculation time to monitor conversion speed across software updates.
• Processed File Size Category: General file size metrics to benchmark algorithmic efficiency and memory thresholds.
• Sanitized File Format: File extension type (e.g. PDF, JPG, PNG). Original document names and directory paths are never transmitted.
• Page / Image Count: Numerical count of pages or images processed during the session.
• Hardware Tier: Generalized, non-unique device capabilities (such as approximate memory tier and CPU category) to help our client-side pipelines prevent out-of-memory errors on resource-constrained devices.
• General Client Environment: High-level browser family, operating system family, device category (Desktop, Mobile, or Tablet), and preferred language.

Network Edge Protection & IP Anonymization

• Regional Distribution: Network edge routing determines approximate, broad regional traffic patterns (such as country or general geographic zone) to ensure edge caching performance.
• Abuse Prevention & Rate Limiting: Network traffic is evaluated at the edge to protect against automated flooding, scraping, and denial-of-service abuse.
• IP Masking & Anonymization: Client IP addresses are processed transiently at the network perimeter and are masked or discarded. IP addresses are never linked to document operations or stored in accessible analytical reports.
• Zero Personal Linkage: All operational metrics are stored in aggregate, anonymous form and cannot be linked to individual users or specific personal identities.

5 Voluntary Communications & Form Submissions

While using our document tools requires zero personal information, you may voluntarily submit data through two specific communication channels:

1. Newsletter & Product Updates (subscribe)

Users who wish to receive PDF productivity tips, feature announcements, and new tool alerts can subscribe through our voluntary form.

• Information Collected: First Name (required), Last Name (optional), Email Address (required), Mobile Number (optional), and PDF Use Case category (optional).
• Processing & Storage: Data is encrypted in transit and transmitted via secure TLS endpoints to our protected subscription application storage.
• Strict Purpose Limitation: Subscriber details are used exclusively to deliver PDFMaster newsletters, tool guides, and major announcements. We will never sell, rent, or distribute our subscriber list to advertisers or third parties.
• Opt-Out & Unsubscribe: You can unsubscribe at any time by clicking the unsubscribe link present in every newsletter issue or by sending an email with the subject "Unsubscribe" to support@pdfmaster.co.in.

2. Support & Contact Inquiries (contact)

When you submit an inquiry, bug report, or feedback via our contact page:

• Information Collected: Your name, email address, inquiry subject, and message text.
• Processing: Form submissions are handled securely through an encrypted transit processor under industry-standard TLS encryption.
• Usage: Contact information is utilized strictly to communicate with you and resolve your support request.

6 Cookies, Local Storage & Advertising

PDFMaster utilizes minimal, privacy-respecting client-side storage mechanisms and industry-standard advertising cookies:

Browser Storage Mechanisms

• localStorage (UI Preferences): Stores your dark or light mode preference (pdfmaster-theme) across page loads. It contains no tracking identifiers, user IDs, or personal data.
• IndexedDB (Session Recovery): Stores transient working drafts locally on your machine to prevent data loss. Kept 100% on-device.
• Cache Storage (Service Worker): Locally caches application assets (HTML, CSS, JS, fonts, WASM) to enable instant loading and offline tool operation.

Third-Party Analytics & Advertising Cookies

• Google Tag Manager: Used to coordinate non-blocking site scripts. Configured with deferred loading on user interaction to eliminate performance and Total Blocking Time (TBT) overhead.
• Google AdSense: Third-party advertising vendors, including Google, use cookies to serve advertisements based on a user's prior visits to our website or other websites on the internet. Google's use of advertising cookies enables it and its partners to serve ads to users based on their browsing history.

Managing Your Cookie & Advertising Preferences

You have full autonomy over advertising cookies. You can opt out of personalized advertising by visiting:

• Google Ads Settings — manage Google personalized ad preferences.
• Digital Advertising Alliance (DAA) WebChoices — opt out of participating ad networks.
• Network Advertising Initiative (NAI) Opt-Out — manage third-party interest-based ads.

You can also configure your browser to block third-party cookies or wipe storage at any time. Blocking cookies will not restrict your access to any PDFMaster document processing tool.

7 Third-Party Infrastructure & Self-Hosted Assets

To eliminate passive third-party tracking, PDFMaster is built with a self-hosting-first philosophy:

• Self-Hosted Typography: The primary typefaces used across PDFMaster (Sora and DM Sans) are hosted locally on our own domain. When you browse PDFMaster, no requests or IP addresses are sent to external font servers.
• Self-Hosted Document Processing Engines: Open-source PDF and image libraries (PDF.js, pdf-lib, JSZip, Sortable, jsPDF) are packaged and served directly from our own domain. We do not load tool processing scripts from external third-party CDNs during file operations.
• Formspree: Delivers contact form messages under GDPR-compliant contractual data processing terms.

8 Global Privacy Rights (GDPR, CCPA/CPRA, India DPDP Act)

Regardless of your country of residence, we uphold your legal rights to understand, access, and control any data associated with your interaction with PDFMaster:

1. European Union & UK Residents (GDPR / UK GDPR)

Under the General Data Protection Regulation, EU and UK data subjects have the right to:

• Right of Access (Art. 15): Request confirmation and access to personal data processed.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17): Request deletion of your data ("Right to be Forgotten").
• Right to Restriction (Art. 18): Restrict processing under specific circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.

Legal Bases for Processing: We process anonymous operational telemetry under the legal basis of Legitimate Interests (maintaining platform performance and defending against abuse). For newsletter communications, our legal basis is your Freely Given, Explicit Consent.

2. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the CPRA:

• Right to Know & Access: You may request the categories and specific pieces of personal information collected.
• Right to Delete: You may request erasure of personal information collected from you.
• Do Not Sell or Share My Personal Information: PDFMaster does NOT sell, rent, or share personal information with third parties for cross-context behavioral advertising or monetary consideration.
• Non-Discrimination: We will never deny services, charge different prices, or provide a different quality of service for exercising your privacy rights.

3. India Residents (Digital Personal Data Protection Act, 2023)

Under the DPDP Act 2023 and the Information Technology Act, 2000:

• Right to Access Information: Obtain a summary of personal data being processed.
• Right to Correction & Erasure: Request updating or deletion of personal data no longer required for the purpose for which it was collected.
• Right of Grievance Redressal: Access to a readily available Grievance Officer (contact details provided in Section 12).
• Right to Nominate: Nominate an individual to exercise your data rights in the event of incapacity or death.

Exercising Your Rights: Because our document tools run client-side with no user accounts, we possess zero records or documents attributable to individual tool users. For newsletter subscriptions or contact form submissions, you can exercise any of these rights by emailing support@pdfmaster.co.in.

9 Data Security & Infrastructure Protection

Security is the foundational design pillar of PDFMaster. By eliminating server-side file uploads, we remove the primary attack vector that exposes documents on other online PDF platforms:

• HTTPS / TLS 1.3 by Default: All communication between your browser and PDFMaster is encrypted using strict modern TLS protocols.
• Absence of Central File Storage: Because files never touch our servers, there is no central document database that can be breached, compromised, or leaked.
• Edge DDoS Mitigation & WAF: Cloudflare edge security filters malicious traffic, automated scrapers, and volumetric attacks.
• Browser Sandbox Protections: Tools operate inside the browser's standard security sandbox, ensuring that document data cannot leak between browser tabs or processes.
• Dependency Auditing: We routinely audit open-source engines (PDF.js, pdf-lib, etc.) and vendor scripts for security advisories and vulnerabilities.

10 Children's Privacy

PDFMaster is a general-purpose productivity utility intended for users aged 13 and older (or 16 and older where required by local legislation such as the EU GDPR). We do not knowingly collect, solicit, or maintain personal information from children under 13.

Because our tools run entirely client-side without registration, children using the tools process their documents locally without transmitting personal data. If a parent or legal guardian discovers that a child has submitted personal details through our newsletter or contact form without parental consent, please contact us at support@pdfmaster.co.in, and we will promptly delete the data within 48 hours.

11 Changes to This Privacy Policy

We may periodically revise this Privacy Policy to reflect additions of new browser tools, enhancements to operational telemetry, or changes in legal standards. When modifications occur:

1. We will update the "Last updated" date displayed at the top of this document.
2. We will post a notification on our website summarizing significant architectural or legal revisions.
3. If any material change alters the handling of voluntarily submitted personal data, we will provide prominent notice on our homepage before the change takes effect.

We recommend reviewing this policy regularly. Continued use of PDFMaster constitutes your agreement to the updated Privacy Policy. Previous iterations of this policy can be requested through our contact page.

12 Contact Information & Grievance Redressal

If you have questions, feedback, or formal privacy inquiries regarding this Privacy Policy or our operational practices, our dedicated team is here to assist:

• Data Fiduciary / Platform Operator: PDFMaster (pdfmaster.co.in)
• Founder: Happy Gupta
• Legal Jurisdiction: Bihar, India
• Official Email: support@pdfmaster.co.in
• Web Help Center: https://pdfmaster.co.in/contact
• Turnaround Commitment: We acknowledge all privacy and compliance communications within 24 hours and resolve inquiries within 48 business hours.