Who runs PDF Flint
PDF Flint is operated by Aamir Shahzad. This policy covers pdfflint.com and www.pdfflint.com. Our Contact & Support page lists the available ways to reach the maintainer about this service or your information.
Policy
Privacy Policy
This page explains how PDF FLINT approaches file processing, security, and data transparency. Last updated on October 18, 2026.
Information you provide
Depending on the tool, you may provide a document, its filename and metadata, processing settings, a web address to convert, or a document password. If you contact support, we receive the information you choose to include. You can browse and use the available tools without creating a PDF Flint account.
Browser and server processing
Some tools read and transform files within your browser. Server-assisted operations send the document and relevant settings to our API; protect and unlock operations also send the passwords needed for that task. URL conversion sends the address you enter to a conversion service. Check the selected workflow before using confidential files. Closing the tab does not recall information already sent to a server.
Why information is used
We use submitted information to carry out the operation you request and respond to support requests. Where data protection law requires a lawful basis, processing needed to provide the service you request is based on performance of a contract; service diagnostics, abuse prevention and handling enquiries rely on legitimate interests in operating and protecting the service, subject to your rights. Legal obligations may require us to keep or disclose particular records.
Browser storage and cookies
The app stores your theme preference in localStorage under pdfflash-dark-mode. Tool activity can store up to 100 recent events under pdfflash_events, including tool names, timestamps and details such as file sizes or page counts; pdfflash_session is a random identifier in sessionStorage. This event helper does not send the stored events to an analytics endpoint and skips recording when your browser reports Do Not Track. Local storage remains until cleared; session storage normally ends when the tab session ends. You can remove these entries through your browser’s site-data controls. The app does not implement advertising cookies or an advertising analytics integration.
Hosting and other services
Vercel hosts the public site and handles network requests. Hosting and error diagnostics can include IP addresses, request details and processing errors. Server-assisted conversions may use a configured Gotenberg service. Browser libraries may request code or OCR language assets from external delivery services; those requests expose ordinary network information to the recipient. Email and hosting providers handle support messages on our behalf. AI tools are currently marked Coming Soon; they are not available processing workflows.
Files, logs and retention
Browser workflows keep working file data in the page session; downloaded files remain on your device until you remove them. Server workflows use request memory and, for some operations, temporary files. The processing code attempts temporary-file cleanup, but this is not a guarantee of immediate or secure deletion after failures. There is no document account or file-history library in this app. Hosting logs, conversion infrastructure and support records have separate retention arrangements; a fixed deletion period for all of these systems has not been verified. Do not rely on an automatic deletion timer. Support records are kept while needed to handle the enquiry and any related legal or security obligations.
Security and your choices
The public site uses HTTPS. This protects data in transit to the site, but does not make server processing end-to-end encrypted or guarantee that a document is safe to upload. Keep originals and use files you are authorized to process. Avoid submitting sensitive material where you cannot accept the processing and retention described here. Do not email document passwords or confidential attachments unless a safe, necessary way to share them has been agreed.
Your privacy rights
Depending on applicable law and the processing involved, you may ask for access, correction, deletion, restriction or portability of your personal information, or object to processing based on legitimate interests. Where consent is used, you may withdraw it without affecting earlier lawful processing. Use Contact & Support to make a privacy request, initially without sharing sensitive documents. We may need proportionate information to verify a request. You may complain to your local data protection authority; in the UK this is the Information Commissioner’s Office (ico.org.uk/make-a-complaint).
International handling and policy changes
Hosting, asset delivery and support providers can handle information outside your country. The public site does not promise UK-only or EU-only processing. Applicable transfer safeguards and provider retention settings need to be confirmed for any arrangement requiring specific regional guarantees. We update this notice when the service or its data handling changes and show the revision date above.
Provider information: Vercel privacy policy. For UK privacy complaints, see the ICO complaint process.