My privacy pledge

What I promise about your files. Scoped, dated, and meant to be held to.

The free PDF tools on discreetpdf.com (edit, merge, split, sign) always run 100% in your browser. Your file's contents never leave your device. Only clearly labeled, opt-in paid features (cloud AI, advanced OCR, high-fidelity conversion) ever send a file off your device, and I tell you, in plain language, before they do. I will never weaken the free local tools to push you toward a paid one, and I will never make this change quietly.Pledge v1, June 7, 2026.

What always stays on your device

The free tools (editing, merging, splitting, signing, page organizing, and the in-browser conversions) process your file entirely in your browser. The bytes are read into memory, changed on your own machine, and written back as a download. They are never uploaded, never copied to a server, and never logged. A strict Content-Security-Policy blocks uploads at the browser level, and you can verify it yourself in 30 seconds.

What would ever touch a server

A few advanced features I plan to add need a server to do their work, because the server has to read your file to process it: cloud AI (chat with or summarize a document), high-accuracy OCR for handwriting and noisy scans, and server-rendered Office conversion for the tricky layouts the free in-browser converter can’t fully reproduce. When I ship them, they will be:

  • Optional and paid. Never required to use the free tools.
  • Opt-in, with a clear prompt before anything leaves your device.
  • On a separate address, not this one, so the free tools stay a clean, no-upload surface you can keep verifying.
  • Honest about their limits. A server that reads your file to summarize or OCR it is not "zero-knowledge," and I won't pretend otherwise. I'll encrypt those transfers, process in memory, delete promptly, and never log your file's contents.

What I'll never do

  • Weaken or cripple the free local tools to push you toward a paid one.
  • Quietly move a feature that runs locally today onto a server. Any change to that boundary gets announced in advance, never made as a silent edit.
  • Add third-party analytics, ad networks, or trackers to the site.
  • Sell your data. The only data I hold is basic server logs and, for anyone who signs in, an account record, a session row per sign-in, and a billing record if they bought a pass, all detailed on the privacy page.

How I pay for it

No ads, and I never sell your data. Nothing is for sale yet; the plan is to fund the free local tools with subscriptions to the optional paid features above. Here's the full business model.

All PDF tools

All free, all in your browser. Pick the task you need.