Privacy Policy

Last updated: July 28, 2026

Your files

Your files are processed entirely inside your browser, on your device. They are never uploaded, stored, or seen by us. We have no server that receives them. This does not change when you create an account.

Using VaultPDF without an account

You can use every tool without signing in. In that case we store a small amount of data in your browser (localStorage): your daily task count and whether you own a Pro plan. To keep the free tier from being abused we also count tasks per day against a one-way hash of your IP address, salted and automatically deleted after 25 hours. We never store raw IP addresses.

If you create an account

Accounts are optional and passwordless. We store:

• Your email address, so we can identify your account and your plan.
• Your name and profile picture URL, only if you sign in with Google, Microsoft, Yahoo, Apple or Facebook and that provider shares them with us.
• Which sign-in methods you have used.
• Your usage counts: how many tasks you have run in total, how many per tool, and how many per day for the last 90 days. This is what your dashboard shows. It records that a task happened, never anything about the file.

We do not store passwords, because there are none. When you sign in with a provider we ask that provider only for your email, name and picture, never for access to your mail, files, contacts or anything else.

Sign-in links sent by email are delivered by Resend (resend.com), which processes your email address on our behalf. A link works once and expires after 15 minutes.

Deleting your account

Open your dashboard and choose Delete account. Your email address, name, picture and usage history are erased immediately. If you have bought Pro, the purchase record itself is kept, because we are legally required to keep transaction records and because it is what lets you restore Pro later or claim a refund. You can also ask us to remove it at [email protected].

Payments and Paddle

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service enquiries and handles returns.

This means Paddle, not us, is the seller you are buying from. Paddle collects and processes your payment details, billing address and email address, and calculates and pays any sales tax or VAT due in your country. It does this as a data controller in its own right, under its own privacy policy and buyer terms.

We never see or store your card number. All we receive back from Paddle is your email address and which plan you bought, so we can unlock Pro on your account.

The checkout window is loaded from Paddle's own servers when you click a buy button. Paddle sets its own cookies there and runs fraud and risk checks on the transaction, which are necessary to take a payment safely. Nothing is loaded from Paddle until you choose to open the checkout.

The charge on your bank or card statement will show Paddle's name rather than VaultPDF. If you do not recognise a charge, paddle.net can look it up for you, or write to [email protected].

Analytics and cookies

We do not use analytics or advertising trackers to profile you, and we never sell data.

We do count visitors, in the least invasive way we could find. Once per browser session your device tells us "somebody visited", and we record two things: the country, which Cloudflare works out from the connection, and a one-way salted hash of your IP address combined with today's date. The hash is only used to avoid counting the same person twice in one day. It cannot be reversed, it cannot be linked to any other day, and it is deleted after 48 hours. There is no cookie, no advertising ID, and nothing that can follow you between visits or between sites. All we ever see is a number per country per day.

When you close the page we also send one number: how many seconds it was visible on your screen. It is added to a daily total and immediately forgotten as an individual figure, so all we can see is an average across everyone. It is not tied to your visit, your country, or anything else about you, and it tells us only whether people find the tools quickly or struggle with them.

The one exception is measuring whether our own ads work. If you reach VaultPDF by clicking a Google ad, Google's conversion measurement records that the click later led to a signup or a purchase. It tells us that an ad worked; it does not tell us who you are, and it is never used to build a profile of you. Visitors from the EU, EEA and UK are not tracked at all unless they have given consent.

Everything else on this site works with no cookies. We use your browser's local storage only to remember your own plan and task count, which never leaves your device.

Contact

Questions? Email us at [email protected].