Privacy Policy

Last updated: 24 March 2026

1. Who We Are

MagPDF ("we", "our", "us") operates the website magpdf.com — a free, browser-based PDF toolkit. Our contact email is getsupportstack@magpdf.com.

This policy explains what information we collect, how we use it, and your rights regarding your personal data under the General Data Protection Regulation (GDPR) and UK GDPR.

2. How We Process Your Files

MagPDF uses three processing modes depending on the tool. We never require an account, and we never log or retain the contents of your documents in any mode:

• On-device tools (merge, split, extract pages, rotate, watermark, organize, edit, and the text extraction in Chat with PDF) run entirely in your browser — these files are never uploaded to our servers. You can verify this in your browser's Network tab.
• Server tools (compress, password protect/unlock, and format conversions such as PDF to Excel or images) upload your file over an encrypted connection, process it in memory only, and never write it to disk — it is discarded the moment your download is ready.
• AI tools (AI Analyze, OCR, and the answers in Chat with PDF) send the extracted text of your document to our AI provider to generate the result. The text is not stored after the response is returned.

3. Data We Do Collect

We collect minimal data necessary to operate the website:

• Standard server access logs (IP address, browser type, pages visited, timestamps) retained for up to 30 days for security and abuse prevention.
• Anonymous usage analytics via Google AdSense signals (only with your consent — see Section 5).
• If you opt into our newsletter, the email address you provide — stored by our email service provider solely to send product updates. It is optional, never required to use any tool, and you can unsubscribe at any time.
• When you use an AI tool, a Cloudflare Turnstile bot-protection check runs to prevent automated abuse. Turnstile processes limited browser signals to confirm you are human; it does not identify you and sets no advertising cookies.

4. Third-Party Services

Google AdSense — We display advertisements provided by Google LLC via Google AdSense (publisher ID: ca-pub-1227691234092200). When you consent to advertising cookies, Google may use cookies and similar technologies to serve personalised ads based on your browsing activity across websites. Google's privacy policy is available at policies.google.com/privacy.

Google Fonts — We load the Inter typeface from Google Fonts (fonts.googleapis.com). When your browser requests the font, Google may log your IP address. Google Fonts does not set tracking cookies. See Google Fonts Privacy FAQ.

We do not use Google Analytics, Facebook Pixel, or any other behavioural analytics platform beyond what AdSense operates.

5. Cookies and Consent

We use Google's Consent Management Platform (CMP) to obtain your consent before any advertising cookies are set. When you first visit magpdf.com (if you are in the EU or UK), you will be shown a consent banner asking whether you accept personalised advertising.

Cookie / Purpose	Set by	Consent required?
Advertising & personalisation	Google AdSense	Yes — opt in
Strictly necessary (site function)	None	No — not used
Analytics	None	No — not used

If you decline advertising cookies, Google will still show ads but they will not be personalised. You can change your consent at any time by clearing your cookies and reloading the page, which will re-show the consent banner.

You may also opt out of Google personalised advertising at adssettings.google.com or via the Digital Advertising Alliance opt-out.

6. Legal Basis for Processing

Under GDPR, our legal bases for any processing are:

• Legitimate interests — server logs for security and abuse prevention.
• Consent — advertising cookies via Google AdSense (only when you opt in through the CMP banner).

7. Your Rights

Under GDPR and UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”).
• Object to processing based on legitimate interests.
• Withdraw consent at any time (for advertising cookies).
• Lodge a complaint with your supervisory authority (in the UK: the ICO at ico.org.uk).

To exercise any right, contact us at getsupportstack@magpdf.com. We will respond within 30 days.

8. Data Retention

Server access logs are retained for a maximum of 30 days and then automatically deleted. Because we do not collect personal data beyond this, there is nothing further to retain.

9. International Transfers

Google AdSense may transfer data outside the European Economic Area. Such transfers are subject to Google's Standard Contractual Clauses and Binding Corporate Rules approved by EU data protection authorities.

10. Children's Privacy

MagPDF is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy occasionally. The "Last updated" date at the top will reflect any changes. Continued use of the site after changes constitutes acceptance of the revised policy.

12. Contact

For any privacy questions: getsupportstack@magpdf.com