Last updated: October 20, 2026
This policy explains what information PDFWrangle at pdfwrangle.com (the "Service") handles and why. PDFWrangle ("PDFWrangle", "we", "us" and "our") operates pdfwrangle.com. PDFWrangle is the data controller for personal information processed through the Service. The short version: your files never leave your device, we don't use analytics, ads or cookies, and we don't sell or share your personal information.
1. Your files stay on your device
PDFWrangle processes your files in your web browser, on your own device. Compressing, merging, converting, splitting, unlocking and signing all run as code in your browser tab. The PDFs, images, passwords and signatures you use with our tools are never uploaded to our servers or shared with anyone. We never receive, store or see them. When you close the tab, they're gone from the page.
2. No account, analytics, ads or cookies
- You don't need an account to use PDFWrangle.
- We don't use analytics tools, advertising or tracking scripts.
- PDFWrangle doesn't set cookies.
- Fonts, including the handwriting styles in Sign PDF, are served from our own site. Pages don't load fonts or scripts from third-party services such as Google Fonts.
If this ever changes, we'll update this policy before the change takes effect.
3. Hosting and server logs
PDFWrangle is hosted on Cloudflare, which acts as our hosting provider. When you visit the site, Cloudflare processes standard access log information to deliver the pages and protect the Service, including:
- your IP address;
- your browser's user agent (browser and device type);
- the URL you requested; and
- the date and time of the request.
This information is used only for security and operations, such as preventing abuse and fixing errors. It never includes the files you process, because those aren't sent anywhere. Cloudflare handles this data under its own privacy policy.
4. If you purchase a paid plan
Every PDFWrangle tool can be used for free. We may offer an optional paid plan in the future, and this section applies only if you purchase one.
Payments through Creem. Paid plan purchases are processed by Creem (Armitage Labs OÜ), our online reseller and Merchant of Record. Creem collects and processes your payment details, billing address and email to complete the sale, issue your receipt and handle tax. We never receive your full card details. Creem handles this information under the Creem Privacy Notice. Creem shares order information with us, such as your email address, the plan you purchased, the order number and its status, so we can provide the paid plan and support.
Unlocking paid features. To unlock paid features on your device, we may check that your purchase is valid using details such as a license key and a random device identifier. This never includes the contents of your files.
Support emails. If you email us, we use your email address and message to answer you and to keep a record of the request.
We keep purchase records for as long as your paid plan is active and afterwards for as long as needed to handle refunds, disputes and legal or tax requirements. We keep support emails for as long as needed to resolve your request.
5. Why we use personal information
Where data protection laws such as the GDPR apply, we rely on:
- our legitimate interests in running a secure, working website, for server logs and abuse prevention; and
- performance of our contract with you, for unlocking and supporting a paid plan you purchase.
Cloudflare and Creem may process information in countries other than your own. They apply safeguards required by applicable law to those transfers.
6. We don't sell or share your personal information
We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We disclose it only to the service providers described above (Cloudflare and, if you purchase a paid plan, Creem), or where the law requires it.
7. Your rights
EU, EEA and UK (GDPR). You have the right to access, correct or delete your personal information, to restrict or object to its use, and to receive a copy of it in a portable format. You can also lodge a complaint with your local data protection authority.
California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request deletion or correction, and not to be discriminated against for exercising these rights. Because we don't sell or share personal information, there is nothing to opt out of.
Residents of other places may have similar rights under local law. To make a request, email support@pdfwrangle.com. We may need to confirm your identity first, for example by asking you to write from the email address used for a purchase. Requests about payment data held by Creem can also be sent to Creem directly.
8. Children
PDFWrangle is not directed to children under 13, or under 16 in the EU, EEA and UK. We don't knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we'll delete it.
9. Changes to this policy
We may update this policy from time to time. We'll post the new version on this page and change the "Last updated" date. If a change materially affects how we handle your personal information, we'll make it clear on this page before it takes effect.
10. Contact
Questions or requests about privacy: support@pdfwrangle.com. We reply within 3 business days.