PKPDFKaj
LEGAL

Privacy Policy

Most files stay on your device; AI assistance is opt-in.

Security at a glance

The short version of the page above, in plain language:

  • Most file tools process your document locally. Optional AI features can send selected text to a third-party provider after consent; review the privacy audit guide.
  • Core tools do not require an account. Network resources and browser storage behavior are described in this policy; check the privacy audit guide for details.
  • We add no watermark and no branding to the file you download.
  • The app loads code and may download OCR language data or other resources. Optional AI features can send selected text after consent; verify actual requests in DevTools for the specific tool you use.
  • Most local tools do not upload the selected document to PDFKaj. This is not a claim that every feature has zero network activity; inspect the Network panel and review optional integrations.

Local processing

Model and language data

Cookies and local storage

Server logs

Language suggestion

Changes and contact

Architecture & privacy audit guide

Local processing: supported PDF operations read files in browser memory and create output blobs for download. Optional AI features may send user-selected text to a third-party AI provider after consent. This site also loads analytics and generic code/resources, so “no network requests” is not a blanket guarantee.

How to inspect network activity

  1. Open browser DevTools (F12 or the browser menu) and choose Network.
  2. Enable “Preserve log”, clear the request list, then load a PDF and run the specific tool.
  3. Filter by Fetch/XHR and inspect request method, destination, headers and payload. Also check “All” for worker scripts, fonts, analytics and language/model downloads.
  4. Repeat with optional AI features disabled, then separately test any feature that asks for consent.

The in-app Privacy Inspector summarizes Resource Timing entries only. Browsers do not expose every request or request body through that API; it is not a certified network monitor and must not be treated as proof of zero outbound requests.

Files, memory and storage

Selected files are held by the page while the tool is running; output is typically delivered as a browser download/blob. Closing or reloading the tab releases page references, but the site cannot promise immediate physical memory wiping. Browser caches may store application code and OCR language data; they are not intended to store the user’s PDF documents. Browser-managed cache and storage can be cleared in site settings.

Security posture and review status

This page describes intended behavior, not an independent security certification. No independent penetration test or third-party privacy audit is claimed. A Content-Security-Policy-Report-Only header is configured as an initial monitoring step. It reports policy violations in supporting browsers but does not block requests. Review browser console reports and hosting behavior before enforcing a stricter policy.