Privacy
Last updated 9 August 2026
In short
- Your files are opened, changed and saved by your own browser. They are never sent to us.
- There is no account, no sign-in and no history. Closing the tab ends it.
- There are two analytics scripts — Google Analytics and Clicky — and neither loads unless you accept the banner. Decline and this site talks to nobody but us.
- If you accept, those two set cookies and receive your IP address and browser details. They never receive your files: nothing can, because your files are not sent anywhere.
- We count how many times each address on this site is requested. That is the whole of what we collect, and §2 explains what it lets us work out.
1 · Your files
All 26 tools on this site run inside your browser tab. The file you choose is read into that tab's memory, worked on there, and handed back to you. It does not reach our server, because there is no address on our server that would accept it.
We therefore hold no copy of your document, know nothing about its contents, its name or its size, and could not produce it if anybody asked us to.
2 · What our server records
For each address on this site we keep one number per day: how many times it was requested. Not who requested it, not at what time within the day, and not from where. There is no conventional access log: no row per request, no IP address, no browser string, no referrer.
| What | Kept or not |
|---|---|
| The address requested, the date, and a count | Kept |
| Your IP address | Not kept |
| Your browser and device details | Not kept |
| The page you came from | Not kept |
| Anything at all about your file | Not kept |
What is seen but not written down
Cloudflare, who serve this site, necessarily see your IP address — a web server cannot send a page back without one — and they hold it under their own terms for their own security purposes. Our code does not record it, and we do not ask them for it.
The one thing this does tell us
Each tool's engine is a separate file at its own address. A count against/wasm/ocr.wasm means somebody used the text-recognition tool that day, and a rising count means more people did. That is a real inference we can draw and we would rather set it out here than have you discover it. It attaches to nobody: there is no identifier in the count, and nothing about the file that was processed ever reaches us.
3 · What is stored in your browser
Four things, all of them on your device, none of them sent anywhere. You can delete all four at any time by clearing this site's data in your browser settings.
| Name | What it is | Why it is allowed |
|---|---|---|
plane-shell-v*, plane-pages-v*, plane-engines-v*CacheStorage | The offline store. The pages, fonts and tool engines you have already used, kept so the site works with the network off. Removing it means the tools need a connection the first time again. The * is the build number, so a new release starts a new store and deletes the old one. | Strictly necessary — it is the offline function you asked for by using a tool |
plane-themelocalStorage | Your theme choice. Light, dark or match my system. Set only when you use the toggle. | A setting you set yourself, with a control |
plane-offline-invite-dismissedlocalStorage | A dismissal note. Records that you closed the "try it with the wifi off" card, so it does not come back. | A setting you set yourself, by closing the card |
plane-analytics-consentlocalStorage | Your answer to the analytics banner. Either "granted" or "denied", written when you press a button on the banner and read on every later page so you are not asked twice. Deleting it brings the banner back. | A setting you set yourself, by answering the banner |
3.1 · Analytics, and the banner that asks first
This site loads two analytics services, Google Analytics 4 andClicky, and it loads neither of them until you press Allow. Before you answer, and permanently after if you answer No, no request is made to either company — no script, no pixel, not even a DNS lookup. Until you answer, there are no cookies on this site at all: not one, of any kind, first-party or otherwise, and you can check that with your browser's storage inspector.
If you accept: Google and Clicky each set cookies in your browser and receive the address of the page you are on, your IP address, and the usual browser details — referrer, screen size, language. Google Analytics is configured with IP anonymisation on. Both are outside our control once the data reaches them, and Google may transfer it outside the EU under its own terms.
What they never receive is a file. Not its contents, not its name, not its page count, not a thumbnail. Analytics runs on the page; your document is opened, changed and saved inside the tab and is never uploaded to anyone, us included. That part of this site has not changed and is not negotiable.
You can change your mind at any time by clearing this site's storage in your browser, which removes the recorded answer and brings the banner back.
3.2 · The storage that is not asked about
The law that produces cookie banners — Article 5(3) of the ePrivacy Directive, and in the United Kingdom regulation 6 of PECR — requires consent before storing things on your device, and exempts storage that is strictly necessary for a service you asked for. The offline store is exactly that: it exists because you used a tool and it is what makes the tool work without a connection. Your theme choice and the dismissal note are settings you set yourself by using a control, which is the same ground a language selector stands on. The banner's own answer is stored for the same reason — recording that you said no is how we avoid asking again.
The exemption is from asking, not from telling, which is why every item is listed above rather than summarised.
Beyond the two analytics services in §3.1, there is nothing else to disclose. No advertising identifier, no embedded video, no social button, no font from someone else's server, no error collector.
4 · What we don't do
A list of things the code on these pages is not able to do, rather than a list of things we have decided against.
- Can'tSend your file anywhere
- Can'tShow an ad or a paywall
- Can'tLearn anything about your file — its name, size or contents
- Can'tKeep a copy after you close this tab
- Can'tGet anything back for you afterwards
5 · Who else is involved
Cloudflare, Inc. host this site and deliver its files, which makes them a processor: they see requests, including IP addresses, in the ordinary course of serving pages. Google and Clicky are processors too, but only for visitors who accept the banner, and only for the page addresses and browser details described in §3.1. Our domain registrar and DNS provider see nothing about you at all. We use Google Search Console and Bing Webmaster Tools, which report to us in aggregate how this site appears in those search engines — that is their record of their own users, not ours of you, and it cannot identify anybody.
6 · Your rights, and how to use them
The controller is Herdo MB, a company registered in Lithuania, in the European Union. Under the GDPR you may ask what personal data we hold about you, ask for it to be corrected or erased, object to its processing, and complain to a supervisory authority — in Lithuania, the State Data Protection Inspectorate.
In practice we hold no personal data about you ourselves. Our own records are daily counts with no identifier in them, so there is nothing to look up, nothing to correct and nothing to delete. If you accepted the banner, the analytics data sits with Google and Clicky, and each has its own process for a request about it.
7 · Children
This site is for anyone who has a document to change. It has no account, collects no information about who is using it, and is not directed at children specifically.
8 · When this page changes
The date at the top is the date this page's text last changed. If what our server counts changes, or the list in §3 changes, this page changes on the same day, and the summary at the top changes with it.
9 · Contact
contact@pdfonaplane.com. A person reads it, usually within two working days. There is no contact form on this site, because a form would need somewhere to post to and there is nowhere.