PDFMill Logo
PDFMill100% Client-Side
Zero-Knowledge Architecture

Privacy Policy

Effective Date: September 14, 2026 • NinjaLabs Inc.

Core Privacy Commitment: Your Files Never Leave Your Device

Unlike legacy online PDF tools (such as iLovePDF, Smallpdf, or Adobe Acrobat Web), PDFMill never uploads, copies, stores, or transmits your document files or their contents to any remote server or third-party service. All document parsing, image downsampling, OCR text recognition, and file merging execute strictly in your browser’s local sandbox via WebAssembly.

1. Technical Proof of Local Processing

When you drag a file into PDFMill:

  • Client Memory Isolation: The file is read directly from your local filesystem into your browser’s V8/JavaScript heap using standard HTML5 File and ArrayBuffer APIs.
  • WebAssembly Binary Execution: Transformations (compression, merging, OCR) execute locally using compiled WASM threads on your device CPU/GPU.
  • Network Verification: You can open your browser Developer Tools (F12) → Network tab during any PDF operation to independently verify that zero HTTP POST/PUT or WebSocket payloads containing document bytes are transmitted.

2. Data We Do NOT Collect

We do NOT collect, store, inspect, or retain:

  • Document names, contents, metadata, text layers, or embedded images.
  • Passwords entered to unlock or encrypt your documents.
  • User identity records (no login or registration exists).
  • Document generation history or hashes.

3. Analytics and Advertising

To maintain PDFMill as a free public utility, we display non-intrusive advertisements served by Google AdSense and aggregate anonymized website usage analytics:

  • Google AdSense: Google uses cookies to serve ads based on prior visits to this website and other websites. Users may opt out of personalized advertising by visiting Google Ads Settings.
  • Anonymized Telemetry: We collect aggregate web vitals (e.g., page load speeds, error rates) to maintain stability across mobile and desktop devices. No document information is ever associated with telemetry.

4. HIPAA, GDPR, and Regulatory Compliance

Because PDFMill does not ingest, transmit, or store document payloads:

  • GDPR (EU/EEA): No personal data contained within documents crosses borders or is processed by external data controllers.
  • HIPAA (United States): Healthcare organizations can safely utilize PDFMill without requiring a Business Associate Agreement (BAA), because PHI is neither created, received, maintained, nor transmitted to NinjaLabs.

5. Contact Information

For privacy inquiries or technical architecture verification requests, please contact our security team at:

privacy@ninjalabs.dev