Privacy Policy

1. Who we are (data controller)

PDFerret is a browser-based PDF tools site operated by an independent developer based in Taiwan. For GDPR and Taiwan's Personal Data Protection Act purposes, the data controller is the site operator. Contact: hello@pdferret.com.

2. What we do NOT collect

Every tool on this site (merge, split, compress, rotate, delete pages, convert, extract text, watermark, page numbers) runs locally with JavaScript inside your browser. Your files are never uploaded, stored, or transferred to any server, and we are technically unable to see the contents of your documents.

There are no accounts, no sign-up, and no collection of personal data via forms or email.

This site can be installed as an app (PWA) and used offline. The installation cache lives only on your device and is fully removed when you clear your browser data.

3. What we collect (anonymous statistics only, and only with your consent)

Until you press “Accept all” on the cookie banner, no analytics or advertising script is loaded. After consent, the following become active:

Google Analytics 4: anonymous traffic statistics (page views, source, country, device type) with IP anonymization enabled.

Microsoft Clarity: anonymous behavior analytics (scrolling, heatmaps) with input masking.

Browser localStorage stores only your cookie-consent choice and language preference, and never leaves your device.

4. Cookie list and retention periods

_ga / _ga_* (Google Analytics): anonymous visitor identification, up to 14 months.

_clck / _clsk (Microsoft Clarity): anonymous behavior analytics, up to 18 months.

cookie_consent (necessary): stores your consent choice, 12 months.

NEXT_LOCALE (necessary): remembers your language preference, 12 months.

5. Legal basis (GDPR)

Analytics cookies: your consent (Art. 6(1)(a)). You may withdraw consent at any time by clearing browser data or choosing “Essentials only”.

Essential local storage (consent, language): necessary to provide the requested service (Art. 6(1)(b), (f)).

6. Your rights

GDPR (EEA/UK): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.

CCPA/CPRA (California): right to know, delete, and opt out of sharing or selling (we do not sell or share personal information), free from discrimination.

Taiwan Personal Data Protection Act: to query, review, obtain copies, correct, suspend processing, and delete your personal data.

Because we only collect consent-based anonymous statistics, most requests are resolved by clearing browser cookies. For assistance, email hello@pdferret.com; we respond within 30 days.

7. Retention

GA4 data is retained for 14 months; Microsoft Clarity data for up to 18 months, after which it is automatically deleted or anonymized. Local consent state expires after 12 months and is asked again.

8. Third-party processors

Google (Ireland) provides GA4 and Microsoft provides Clarity; they may set cookies in your browser after consent under their own policies. We never sell or share your data with anyone else.

9. Children's privacy

The site is not directed to children under 13 and we do not knowingly collect their data (COPPA).

10. Changes and governing law

Changes to this policy will update the date on this page. This policy is governed by the laws of Taiwan (R.O.C.), and disputes fall under the jurisdiction of Taiwanese courts.

11. Hall of Fame game

The Hall of Fame on the Play page stores only a self-chosen anonymous nickname (2–16 characters) and a game score — no account, no sign-in, and no other personal data.

Entries are automatically deleted after 90 days. To delete your entry, correct your nickname, or exercise any privacy right, email privacy@pdferret.com and we will handle it promptly.