Privacy notice
Last updated 15 October 2026
Your files never leave your device. PDF’R’US can’t see, receive or keep them. This notice explains that, and the little information that is processed when you visit.
Who runs this website
pdf-r-us.com (“PDF’R’US”) is run by Oscar Baia, a private individual based in Portugal. Oscar Baia decides how personal data is handled on this website (the “controller” under data protection law).
Questions about privacy: privacy@pdf-r-us.com
Your files are never uploaded
Every tool works inside your web browser, on your own device. When you choose a file, your browser opens it, makes the change and saves the result back to your device. The file is never sent to us or to anyone else.
This is enforced, not just promised. The website tells your browser to block the page from sending data anywhere, even to our own server, and our server refuses any file sent to it.
This covers everything you use in the tools:
- your documents and images, and any files you attach to a PDF
- signatures you draw, type or upload
- text you type, including passwords and words you search for
- digital certificates and their passwords
- text recognised from scanned pages
When you close the page, the working copies are gone. You can check this yourself: open a tool, choose a file, then switch off your internet connection. The tool still works, because nothing needs to be sent.
What we don’t collect
- No accounts, sign-ups or email lists.
- No cookies, and nothing stored in your browser.
- No analytics, advertising, tracking pixels or social media buttons.
- No record of which tools you use or which files you open. The tool you choose appears after the “#” in the address, and browsers never send that part to a website.
- No outside services in the page. Everything the page needs, including its code and fonts, comes from this website.
What is processed when you visit
Like every website, pdf-r-us.com is delivered by a hosting provider: Cloudflare, Inc. To deliver the pages and protect the website from attacks, Cloudflare processes technical information about each visit:
- your IP address
- your browser and device type
- the date and time
- the pages and files of this website that your browser asked for
- approximate location worked out from your IP address, such as your country
These records are kept in the website’s Cloudflare account for up to 7 days and are then deleted automatically. We use them only to keep the website running and secure, for example to look into errors or attacks. They never contain your files, file names or anything you type into the tools.
Cloudflare may also process connection data for the security of its own network, as described in Cloudflare’s privacy policy.
Why this information is processed
The legal basis is our legitimate interest in delivering the website reliably and securely (Article 6(1)(f) of the General Data Protection Regulation, the “GDPR”). We don’t use visit records for anything else. We don’t build profiles, make automated decisions about you, or sell or share any information for advertising.
Who receives it
Only Cloudflare, Inc., as our hosting provider, which processes this information on our behalf under its data processing terms. Cloudflare is based in the United States and may process data outside the European Economic Area. These transfers are protected by the EU–US Data Privacy Framework and by standard contractual clauses.
We don’t share information with anyone else unless the law requires it. Because we never receive your files, we couldn’t hand them over even if asked.
If you email us
If you write to privacy@pdf-r-us.com, we use your email address and message only to reply, and keep them only as long as needed to deal with your request. Messages to this address are forwarded by Cloudflare Email Routing to the owner’s mailbox, which is provided by Google (Gmail).
Your rights
Under the GDPR you can ask to see, correct or delete personal data we hold about you, to restrict or object to how it is used, and to receive a copy of it. Write to privacy@pdf-r-us.com and we will reply within one month.
Visit records don’t include names and are deleted within 7 days, so we may not be able to find you in them. If you tell us your IP address and the time of your visit, we will check.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or to the authority in the EU country where you live.
Children
The website has no accounts and collects no information about who is using it, so it doesn’t knowingly collect personal data about children.
Changes to this notice
If anything here changes, we will update this page and the date at the top. If the website ever needed to collect more information than described here, this notice would say so before that happened.