Privacy Policy

Last updated: April 23, 2025

1. Who we are

Totally Free PDF Editor ("we," "us," or "our") operates the website at totallyfreepdf.com. We provide a free, browser-based PDF editing tool.

2. Information we do NOT collect

We do not collect, store, transmit, or process:

• The contents of any PDF file you open or edit
• Your name, email address, or any personal identifiers
• Account credentials (there are no accounts)
• Payment information (the service is free)
• Location data beyond general country-level data that may appear in server access logs

All PDF processing — loading, editing, redacting, signing, and downloading — happens entirely within your web browser using client-side JavaScript. Your files never leave your device.

3. Information that may be collected automatically

Like most websites, our hosting infrastructure (Microsoft Azure Static Web Apps) may record standard server access logs including:

• Your IP address (anonymized after 90 days)
• Browser type and version
• The pages of our site you visit and the time of your visit
• Referring URL

This data is used solely for security monitoring and aggregate traffic analysis. It is not sold or shared with third parties for marketing purposes.

4. Cookies and advertising

We display advertisements to fund this free service. Our advertising partner is Google AdSense. If you accept cookies via our consent banner, Google AdSense may place cookies on your device to show you relevant ads based on your interests. You can opt out of personalized advertising at any time at adssettings.google.com.

If you decline cookies, advertising cookies will not be set and you will see non-personalized ads only. The tool remains fully functional either way.

Your cookie preference is stored in your browser's localStorage and can be changed at any time by clearing your browser data.

For more information about how Google uses data from its advertising services, see Google's Privacy & Terms.

5. Legal bases for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process data on the following legal bases:

• Legitimate interests — server access logs for security and infrastructure monitoring
• Consent — advertising cookies (Google AdSense), only after you explicitly accept via our cookie banner

You have the right to access, correct, delete, or port your personal data, and to withdraw consent at any time, by contacting us at the address below.

6. California residents (CCPA/CPRA)

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising without consent. California residents have the right to know what personal information is collected, to delete it, and to opt out of its sale. Since we collect minimal data and do not sell it, most CCPA rights are satisfied by our standard practices. To exercise any rights, contact us below.

7. Children's privacy

This service is not directed to children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Data retention

Server access logs are retained for up to 90 days for security purposes, then automatically deleted. Since we do not store your files or personal information, there is nothing further to retain or delete.

9. Third-party links

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the service after any changes constitutes acceptance of the revised policy.

11. Contact us