Privacy & Security Policy

1. Technical Processing Lifecycle

To understand how your privacy is preserved, here is the technical sequence of events when you use our converter:

1. Local File Reading: When you select or drag images onto the site, the files are loaded directly into browser memory (RAM) using standard HTML5 FileReader APIs.
2. Browser Canvas & WebAssembly Synthesis: Our client-side JavaScript engine (pdf-lib and Canvas) calculates dimension layouts, applies compression, and builds the PDF binary directly on your processor.
3. Local Blob Output: The finalized PDF document is compiled into an in-memory blob: URI on your machine.
4. Direct Download: Clicking "Download PDF" saves the file directly from your RAM to your device storage.
5. Automatic Memory Cleanup: Closing the tab or navigating away immediately garbage-collects all image buffers. Zero bytes were transmitted across the internet.

2. Comparison With Legacy Cloud Converters

Major platforms like iLovePDF, Smallpdf, and similar cloud services operate on a client-to-server model. Your files travel over the public internet to their remote servers, sit in temporary cloud buckets, and undergo server-side processing before download.

Even when cloud services claim automated deletion after a few hours, server-side storage creates unavoidable vulnerabilities: man-in-the-middle risks, remote data breach exposures, ISP logging, and employee access risks. Because OnlineImageToPdf.com performs zero server uploads, these vulnerabilities simply do not exist.

3. Cookies and Local Storage Usage

We respect your digital footprint:

• No Tracking Cookies: We do not set third-party cross-site advertising trackers, behavioral cookies, or user fingerprinting scripts.
• Theme Preferences: We use browser localStorage solely to remember your chosen visual theme (Dark Mode or Light Mode) between page visits.
• Zero Account Cookies: Our tools require no registration, sign-in, or session authentication cookies.

4. GDPR Compliance (EU General Data Protection Regulation)

Under the General Data Protection Regulation (GDPR), we do not act as a data processor or data controller for your document contents because we never collect, receive, or store your documents. Because no personal data is transferred to external servers:

• Your rights under GDPR (Articles 15 through 22, including the Right to Access, Right to Rectification, and Right to Erasure / "Right to be Forgotten") are inherently protected because no personal data resides on our infrastructure.
• Zero cross-border personal data transfers occur when processing your documents.

5. CCPA / CPRA Compliance (California Consumer Privacy Act)

In accordance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• We do NOT sell, rent, disclose, or share your personal information with third parties.
• We collect no identifiers, biometric information, commercial history, or geolocation data.

6. Children's Online Privacy Protection (COPPA)

OnlineImageToPdf.com is accessible to general audiences. We do not knowingly collect or solicit personal information from children under the age of 13. Since no personal data or files are harvested from any user, our service is fully aligned with COPPA standards.

7. Policy Changes & Inquiries

We may update this Privacy Policy periodically to reflect technological improvements or regulatory developments. Any amendments will be reflected on this page with an updated "Last Updated" timestamp.

If you have questions, inquiries, or security disclosures regarding this policy, please reach out directly: