Privacy Policy

Last updated: January 2026

Your privacy matters. This policy explains exactly how ComfortablePDF handles your information when you use our free PDF tools.

1. Files You Upload

Files are used only to perform the requested conversion or processing. We never read, index, sell, share, or retain your file contents. All uploaded files and output files are automatically and permanently deleted after 2 hours — no action required on your part.

2. Data We Collect

We collect the minimum data needed to operate the service:

  • IP address and browser information — used for abuse prevention, rate limiting, and server security logs. Stored for 30 days.
  • File metadata — filename, file size, and MIME type (never file contents). Used for processing only, deleted with the file.
  • Anonymous usage statistics — which tools are used, processing times. No personal data attached.

We do not require registration, collect email addresses, or create user profiles of any kind.

3. Cookies

We use three categories of cookies:

  • Essential cookies — session management and CSRF protection tokens. Required for the site to work. Cannot be disabled.
  • Analytics cookies — anonymous traffic statistics via Google Analytics. You may opt out at google.com/dlpage/gaoptout.
  • Advertising cookies — Google AdSense may set cookies to show relevant ads that fund the free service.

4. Security

All file transfers are encrypted using HTTPS/TLS 1.3. Files are stored in isolated, access-controlled storage and deleted automatically. We apply industry-standard security practices and conduct regular security reviews.

5. Legal Compliance

We comply with applicable data protection laws across our target regions:

  • GDPR — General Data Protection Regulation (EU / Ireland)
  • POPIA — Protection of Personal Information Act (South Africa)
  • PDPA — Data Privacy Act / PDPA (Philippines)
  • Privacy Act 1988 (Australia / New Zealand)
  • NDPR — Nigeria Data Protection Regulation

6. Third-Party Services

We use the following third-party services, each with their own privacy policies:

  • Google Analytics — anonymous traffic analysis
  • Google AdSense — advertising to fund the free service
  • Cloudflare — CDN, DDoS protection, and SSL

We never sell your data to any third party.

7. Your Rights

Under GDPR and other applicable laws, you have the right to request access to, correction of, or deletion of any personal data we hold. Since we collect minimal data and link nothing to personal profiles, most requests can be resolved simply by contacting us.

8. Contact

For any privacy questions or data requests, please contact us via our contact page. We aim to respond within 5 business days.