Privacy at PDFusta

Updated October 1, 2026

Your documents

The four converters in the English section process files in your browser. Choosing a file does not upload it to PDFusta. Other parts of the site include conversions that use a server; those tools identify their processing method on the page. File contents and filenames are not included in our usage measurements.

What a visit leaves behind

You do not need an account. Our security access logs can contain an IP address, requested address, time, response status and browser identification. These records help investigate attacks and technical faults and rotate automatically. They are separate from the usage events described below.

Usage events record page paths, language, device category, country code, source category and tool activity. We use random identifiers to connect events in a tab and distinguish individual conversion attempts and repeated deliveries. The tab identifier is held in session storage; a browser that restores a tab may restore its storage too. We do not connect these identifiers to an account or email address.

When a conversion fails

A diagnostic event can include a fixed error code, the processing stage, stage timings and the application version. File sizes, output sizes and page counts are recorded in ranges. We do not send raw error messages, stack traces, document text, passwords or file hashes. A download event means an attempt to start a download; it does not establish that a file was saved.

While a tool is running, a short status note may remain in the tab's storage. If that storage is restored, a note up to 24 hours old can tell us that a result was not received. Leaving a page or recovering such a note is not treated as proof of a browser crash. Usage and diagnostic records are retained for no more than 120 days, with a separate storage limit.

Cookies and analytics

The converters do not require cookies. Selected usage events are forwarded by our server to Google Analytics with limited information such as page path, language, device category and country. The browser does not send these events directly to Google. Detailed diagnostic fields are not forwarded, and advertising personalization is disabled.

Opening a link to another website takes you to that site's own privacy practices. If you contact us, avoid including a document or sensitive information in your message; an error code is usually a better starting point.