Your files never reach our servers.

• Your documents stay on your device. Every tool reads and writes files inside your browser tab. No pdfnex tool sends a document, a page of it, its name or its text to our servers.
• You never need an account to use a tool, open a form or download a result.
• An account, if you make one, holds metadata only: your email, name, a hashed password, the forms you follow, your reminders and your upload presets.
• Analytics are first-party and cookieless. They record pages and tool outcomes, never file names, sizes, contents or anything you type into a form.
• No advertising, no third-party scripts, nothing sold.

When you add a file to a tool, the browser reads it into the tab’s memory and the tool’s engine (JavaScript and WebAssembly served from our own site) processes it there. The result is saved by your browser. Our Content-Security-Policy only lets the page’s scripts connect to our own origin, and you can confirm that no file leaves your device with the checks on Verify privacy.

Kept on your device. Some features store data in your browser’s own storage (IndexedDB, named pdfnex-local), never on our servers: a list of recent jobs and, for results under 50 MB, a copy so you can download them again; a form profile (for example your W-9 payee details); saved signatures; and presets you create while signed out. You can clear each of these from the page that uses it, or by clearing this site’s data in your browser. If you use a shared computer, clear them when you finish.

Official forms. When you open a form page, your browser downloads the agency’s PDF from our server, like any other file on the site. What you type into the form stays in the tab.

An account exists for email alerts and synced presets. We store:

• Your email address and the name you give us.
• Your password, only as a bcrypt hash. We cannot read it.
• Sign-in sessions: a SHA-256 hash of the session token, its expiry and your browser’s user-agent string.
• The forms you follow (for example irs:w-9) and any deadline reminders you set (a key such as irs:1040-es-q4-2026 and a date).
• Upload presets: a label, a size or page limit, and which destination it came from.
• The alert emails we prepare for you: subject, text and whether they were sent. They name a form, an edition and a date, never a document or an entry.
• A security log of sign-ins and account changes (the action and the time).

An account never holds your documents, your form entries, your form profile or your signatures.

We measure how the site is used with our own analytics, stored in our own database. There is no analytics vendor and no advertising tag. We do not set an analytics cookie: a random visitor id is kept in your browser’s local storage and a session id in session storage.

Each event records the page path, the event type (for example a page view or a finished tool run), the referring site’s domain and any campaign tags in the link, country, device type, browser, operating system, screen width, language and time zone, and a hash of your IP address salted with a value that changes every day, used to limit abuse. We do not store your IP address.

Tool events carry only the tool’s name, the outcome and a coarse duration bucket (such as “1–5 s”). They never include a file name, a file size, page text or anything typed into a form. Analytics records are deleted after 25 months.

• pdfnex_session: set only when you sign in. It keeps you signed in for up to 60 days. It is HTTP-only and sent only to this site.
• pdfnex_in: a non-sensitive “signed in” hint so pages can show your account menu.
• Local storage: your light or dark theme, the analytics visitor id described above, and the on-device data described under “Your files”.

We do not sell or rent personal data and we do not share it for advertising. Requests to the site pass through our network provider (Cloudflare) and our hosting server, which process connection data such as IP addresses to deliver pages. If email alerts are switched on, they are delivered through an email-sending service, which receives your address and the alert text.

We disclose information only when the law requires it. Because we never receive your documents, we have none to disclose.

Account data is kept while your account exists. You can delete your account at any time from your account page. Deleting it removes your account, sessions, followed forms, reminders, presets and alert emails straight away. Entries in the security log keep the action and time for security review. Analytics are not linked to your email or name and expire after 25 months.

On-device data is under your control: it stays in your browser until you clear it.

We will update this page when what we collect changes, and the date will change with it. Last updated 2026-10-05.

A privacy contact address will be listed here before public launch. Until then, you can delete your account yourself at any time.