Privacy Policy
At Kompres PDF, we believe privacy is a fundamental right. This policy explains our data practices, technical architecture, and your rights when using our website and services.
1. Client-Side PDF Processing (No File Uploads)
Kompres PDF operates on a client-side architecture. When you compress a PDF document, the entire file analysis, font parsing, and compression routines execute directly inside your web browser's memory using JavaScript and WebAssembly (via pdf-lib and pdfjs-dist).
Your PDF files are not intentionally uploaded, stored, or processed on our backend servers. The documents remain on your device and under your direct control at all times throughout the compression lifecycle.
Technical Privacy Guarantee
Because compression is performed locally in your browser, our servers do not receive or store copies of your PDF files or their contents.
2. Information We May Collect
Because we do not require user accounts or server document uploads, our data collection is strictly limited to standard operational and diagnostic information:
- Network Infrastructure Logs: Our hosting and edge CDN provider (Cloudflare) automatically records transient HTTP request metadata (such as IP address, browser type, referring URL, and timestamp) strictly to route web traffic, mitigate DDoS attacks, and protect service integrity.
- Aggregated Analytics (Subject to Consent): If Google Analytics is enabled and you grant consent via our Cookie Settings, aggregated, pseudonymized information regarding page visits, device type, and referral sources may be processed to help us understand general usage patterns.
- Direct Communications: If you contact us by email, we retain your email address and message contents solely to respond to your inquiry and provide assistance.
3. No Accounts, No Payments, No Document Storage
Kompres PDF does not offer user accounts or logins.
We do not process credit cards, billing details, or financial transactions.
We do not maintain a server-side document database. Once you close your browser tab or clear the application, processed files exist only in your own device's downloads or temporary browser memory.
5. Legal Bases for Processing (GDPR / UK / International)
For visitors in jurisdictions requiring a lawful basis for data processing (such as the European Economic Area, United Kingdom, and Switzerland):
- Legitimate Interests: We process transient network logs based on our legitimate interest in maintaining site stability, preventing fraud, and defending against cyber threats.
- Consent: Where non-essential analytics or advertising cookies are utilized, processing is grounded strictly on your freely given, specific, and revocable consent.
- Legal Obligations: In rare instances, we may process information to satisfy applicable statutory requirements.
6. Your Privacy Rights
Depending on your location, you may have statutory rights under data protection laws such as the GDPR, UK GDPR, California Consumer Privacy Act (CCPA/CPRA), or India's Digital Personal Data Protection Act:
- Right to Know / Access: Inquire whether we process your personal data and obtain details.
- Right to Deletion: Request deletion of personal data we may hold (such as email correspondence). Please note that because we do not store your PDFs, we have no documents to delete.
- Right to Rectification: Correct inaccurate personal records.
- Right to Withdraw Consent: Revoke previously granted cookie or tracking consent at any time without penalty.
- Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
7. Notice for California Residents (CCPA / CPRA)
Under the California Consumer Privacy Act, California consumers have specific rights regarding personal information.
We do not sell personal information, nor do we share personal information for cross-context behavioral advertising without explicit affirmative consent.
We do not collect sensitive personal information.
8. International Data Transfers
Our edge network infrastructure is distributed globally through Cloudflare. When you visit our website, basic network connections are established with the nearest edge data center. We rely on standard contractual clauses and rigorous technical protections where cross-border data routing occurs.
9. Information Security Practices
We implement industry-standard safeguards, including end-to-end TLS/HTTPS encryption, strict content security policies, and edge-level firewall protection. Most importantly, keeping PDF document processing inside your own browser provides an inherent privacy layer against unauthorized server access.
10. Children's Privacy
Kompres PDF is a general audience document utility. We do not knowingly collect personal data from children under the age of 13 (or under 16 where local law specifies). If you believe a child has provided us with personal information, please contact us immediately so we can remove it.
11. Contact Us and Policy Updates
We may update this Privacy Policy periodically to reflect technological, operational, or legal developments. The 'Last Updated' date at the top indicates when revisions took effect.
For questions regarding this policy or our data practices, please reach out to: [Privacy Contact Email - See Configuration]
Have questions about your data?
You can submit a data subject inquiry or learn more about exercising your privacy rights on our dedicated request page.