Privacy policy
Last updated November 2026. Paper Handler processes everyday PDF work locally where possible.
What stays on your device
PDFs you open, scan, annotate, fill, compress, compare, merge, split or protect are processed in this browser and stored in this browser's IndexedDB. Paper Handler has no user accounts or sign-in. OCR downloads language and engine files from jsDelivr on first use; page images are processed locally and are not sent to that CDN. Fonts are bundled with the website at build time.
What leaves your device
Remote signing and document uploads are disabled in this Cloudflare deployment. The local PDF, scan, OCR, form and signature tools run in this browser; Paper Handler does not receive those document bytes. OCR may download public language and engine files from jsDelivr, but not the page image or recognized document text.
Ads
The current build uses locally rendered house-ad placeholders only. No third-party advertising network or advertising cookie is configured. A self-hosted result video may be enabled through configuration; it is dismissible and never gates an operation or download.
Analytics
No analytics script is currently enabled. The hosting provider may process standard request metadata for service operation and security. Application code does not send document contents to an analytics service.
Your rights
There are no user accounts. You can permanently delete a signing agreement from its manage link. By default, links expire after 90 days; expired/cancelled agreements are deleted after 30 days, completed agreements after 365 days, email logs after 90 days and unfinished uploads after 30 minutes. These policies take effect only after the owner configures the scheduled maintenance endpoint. Clearing this browser removes local documents and signatures.
Providers and legal notice
Production hosting, database, storage and email providers may process request metadata needed to operate their services. Their privacy terms also apply when those features are enabled. This draft has not been reviewed by a lawyer; international privacy, cookie and electronic-signature obligations must be reviewed for the launch jurisdictions.