Privacy & data
The short version: your PDF is never uploaded, so there is nothing for us to keep, leak or hand over.
Your files
GetPDF has no upload endpoint. The decryption engine is qpdf, compiled to WebAssembly and served to your browser as a static asset. When you add a file it is read into your tab's memory, processed by that engine in a worker thread, and returned to you as a download.
- Your PDF is never transmitted to us or to anyone else.
- Your password is never transmitted. It is passed to the in-page engine and discarded.
- Nothing is written to local storage, IndexedDB or a cache. Closing or reloading the tab wipes the queue.
- You can verify all of this: open developer tools, watch the network panel, and unlock a file. Or disconnect from the internet after the page loads — it keeps working.
What we do collect
- A theme preference in your browser's local storage. It never leaves your device.
- Aggregate analytics through Google Analytics: page views, approximate country, device type, referrer. No filenames, no file contents, no passwords — those never reach any network request. Google's policies govern that data, and an ad blocker or browser-level opt-out will stop it.
Advertising
This tool is free and supported by advertising. Ad space is reserved in the layout and clearly marked. When advertising is switched on, the ad network may set cookies or similar identifiers under its own privacy policy and the consent rules that apply where you are. Advertising is kept out of the drop area and the file queue, and never has access to your documents.
What we cannot do for you
Because nothing is stored, we cannot recover a file you have lost, resend an unlocked copy, or tell you what you processed last week. Download the result before you close the tab.
Open source components
GetPDF bundles qpdf, which is distributed under the Apache License 2.0. Its licence and copyright notices are preserved with the compiled artefacts we ship. We are grateful for it, and are not affiliated with the qpdf project.