Privacy Policy
Last updated: August 29, 2026
1. Who we are
kbpdf.com ("we", "the site") provides free browser-based file tools. For the purposes of the EU/UK General Data Protection Regulation we are the data controller for the limited information described below. You can reach us via our contact page or at support@kbpdf.com.
2. Your files are processed in your browser
Every conversion, compression, edit and signature on this site runs inside your own browser, using JavaScript and WebAssembly. Your images, PDFs, videos and audio are not transmitted to us, not stored on our servers, and not seen by us or anyone else. If you disconnect from the internet after the page has loaded, the tools still work.
2a. The one exception: large PDFs
Very large PDFs can exhaust the memory available to a browser tab. For those files only, we offer server-side compression as an explicit choice. It never happens automatically:
- It is offered only for PDFs above roughly 30 MB, and only on our PDF compression pages.
- Nothing is uploaded unless you click the server button. Declining, or simply ignoring the prompt, sends us nothing.
- If you accept, the PDF is uploaded over HTTPS, compressed by Ghostscript on our server, and made available to you through a single-use link.
- The uploaded file and the compressed result are deleted within 15 minutes, automatically. We do not read them, copy them, or retain any part of them.
- The legal basis is your consent (Art. 6(1)(a) GDPR), given by that click.
Every other tool on this site - images, passport photos, video, audio, transcription, signing - is browser-only with no server option at all.
3. What we do collect
- Analytics, only with your consent. If you accept cookies we load Google Analytics 4 (measurement ID G-BM63XZWCP7) to count visits and see which tools are used. IP anonymisation is enabled and Google advertising signals are disabled. If you decline, Google Analytics is never loaded and no analytics cookies are set.
- Aggregate counters. We keep a simple server-side count of page visits and completed conversions. These are totals only: no IP address, no identifier, nothing tied to you.
- Error reports. If a tool fails, your browser may send us the error message and the page it occurred on so we can fix it. These contain no file contents and no personal data.
- Server logs. Our hosting provider records standard web server logs, including IP address, for security and abuse prevention.
4. Cookies and local storage
| Cookie / storage | Purpose | Set when |
|---|---|---|
| cai_consent (localStorage) | Remembers your cookie choice | Only after you choose |
| _ga, _ga_* | Google Analytics visit measurement | Only if you accept |
Nothing is written to your device before you make a choice. You can change your mind at any time: reopen cookie settings.
5. Third parties
Some page assets load from third-party networks, which necessarily receive your IP address as part of the request:
- Google Analytics for measurement, only after consent.
- cdnjs.cloudflare.com for JavaScript libraries used by the tools.
- Google Fonts for typefaces.
We do not sell, rent or share personal data with anyone, and we run no advertising trackers or data brokers.
6. Legal basis (EU and UK visitors)
Analytics cookies are processed on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Server logs and error reports are processed on the basis of our legitimate interest (Art. 6(1)(f)) in keeping the site secure and working correctly.
7. Retention
Google Analytics data is retained for 14 months. Aggregate counters are kept for 60 days. Server logs are retained by our host under their own policy. Your files are never retained, because they never reach us in the first place.
8. Your rights
If you are in the EU, the UK or a comparable jurisdiction, you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. Because we hold no account and no identifier for you, the fastest way to exercise most of these rights is to decline cookies and clear your browser storage. For anything else, contact us and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Children
This site is not directed at children under 13, and we do not knowingly collect personal data from them.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a new effective date.
11. Contact
Questions about this policy or your data: support@kbpdf.com, or use our contact page.