Privacy Policy

1. Introduction

This Privacy Policy explains how PDFSplitOrMerge ("we," "our," or "the website") handles information when you visit pdfsplitormerge.com, use our Merge PDF tool, use our Split PDF tool, or communicate with our technical support team. We believe privacy should be built into code rather than merely stated in policies.

2. Information Users Provide

We do not require user accounts, passwords, or credit card details. The only direct personal information we receive is information you voluntarily choose to submit when contacting us through our support form (such as your name, email address, chosen inquiry category, and the text of your message).

3. PDF File Processing

When you select or drop a PDF file into our tools, the file is parsed by our inspection engine to extract structural metadata (such as page counts and cryptographic encryption status). This metadata is strictly used to display page badges and validate ranges in your active session. We never read, analyze, or harvest the text, images, or vector paths contained inside your files.

4. Browser-Side Processing

Under our primary operating mode, PDF merging and page extraction occur entirely client-side using pure JavaScript and WebAssembly. Your documents remain loaded in your web browser's sandboxed memory. They do not travel across the public internet to our servers during ordinary client-side operations.

5. Server API Endpoints

Our application maintains server-side endpoints (/api/pdf/merge and /api/pdf/split) for environment fallback and automated testing. In the event a file buffer is transmitted to an API route, it is processed immediately in ephemeral Node.js memory streams and returned directly to your browser as a downloadable binary. No files are written to permanent server databases or cloud file buckets.

6. Contact Form Data

When you submit an inquiry through our Contact Page, we collect your name, email address, selected category (e.g. General Inquiry, Tool Feedback, Bug Report, Feature Request, Partnership Opportunity), and message body. This information is used exclusively to respond to your technical inquiry or address reported defects.

7. Resend and Email Delivery

Contact inquiries are delivered to our official inbox ([email protected]) via the Resend transactional email service. Resend acts as a data processor to transmit your message securely over TLS-encrypted connections. We do not use your contact email for newsletters, promotional marketing, or resale.

8. Google Analytics 4 (GA4)

We use Google Analytics 4 to measure aggregate, anonymized website traffic, detect technical performance bottlenecks, and understand overall tool utilization rates (e.g., total merge and split completions). Our implementation strictly strips all document filenames, document text, and personal email addresses before any telemetry dispatch.

9. Analytics Defaults and Consent Behavior

In jurisdictions where applicable privacy regulations permit aggregate website traffic measurement without prior consent, Google Analytics runs by default without displaying an automatic popup. In jurisdictions where applicable laws mandate prior opt-in consent (such as the European Union, European Economic Area, and United Kingdom), analytics remains disabled by default until you explicitly grant consent through our footer settings.

10. Essential Local Storage

We use the browser's localStorage API for essential site functionality:

• theme-preference: Stores your chosen color mode ("light" or "dark").
• pdf_analytics_consent: Stores your explicit analytics choice ("granted" or "denied").

These storage keys are strictly functional and do not track you across other websites.

11. Cookie and Analytics Preferences Dialog

You have full control over your analytics preferences. At the bottom of every page, the Cookie & Analytics Settings button opens an on-demand preferences dialog where you can review active storage categories, toggle Google Analytics on or off, or click "Reject All".

12. Security Measures and Limitations

We implement industry-standard security practices, including strict HTTPS encryption (TLS), HTTP security headers, input sanitization, rate limiting on contact endpoints, and automated honeypot spam protection. While we take extensive measures to safeguard our platform, no method of electronic transmission or web architecture is 100% impenetrable.

13. Data Retention

PDF documents processed in your browser are retained only in temporary device memory for the duration of your active session and are destroyed when you close the tab or reset the tool. Support messages sent to our inbox are retained only as long as necessary to resolve your technical inquiry and provide customer assistance.

14. Third-Party Service Providers

We partner with selected infrastructure providers solely to host and deliver our web service:

• Hostinger: Provides web hosting and server runtime infrastructure.
• Resend: Provides transactional email delivery for contact form messages.
• Google LLC: Provides Google Analytics 4 traffic measurement under Consent Mode v2.

15. User Choices and Privacy Rights

Depending on your jurisdiction (including the EU/EEA, UK, and various US states), you may have statutory rights to access, correct, delete, or restrict the processing of personal information you provide to us. Because we do not maintain user accounts or file databases, we hold no document records to query or delete. If you submitted a contact form inquiry, you may contact us to request the deletion of your correspondence.

16. How to Disable Analytics

You can disable analytics at any moment by clicking the Cookie & Analytics Settings button in our footer and selecting "Reject All" or toggling the Google Analytics switch to "Disabled". This immediately signals Google Consent Mode v2 (analytics_storage: 'denied'), halts subsequent telemetry dispatches, and persists your choice in your browser.

17. Children's Privacy

PDFSplitOrMerge is a general audience document utility. We do not knowingly collect personal information from children under the age of 13 (or under the age of 16 in applicable European jurisdictions). If you believe a child has provided personal information to us through the contact form, please notify us immediately.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our document handling practices, please contact our data protection and technical support team:

19. Changes to This Policy

We may periodically update this Privacy Policy to reflect technical enhancements, architectural updates, or regulatory requirements. Any modifications will be posted to this page with an updated revision date. Continued use of our services following an update constitutes acceptance of the revised terms.