Privacy
Last updated 27 August 2026
stackpetal processes your files inside your own web browser. Your documents are never sent to us, because there is no server to send them to.
What happens to your files
When you add a PDF or image, it is read directly by your browser and held in your device's memory for as long as the tab is open. Every operation — merging, splitting, rotating, watermarking, building a PDF from images — runs as code on your own machine.
Your documents are never transmitted over the network. We never receive a copy, so we cannot read, store, share, sell or hand over them, and there is no copy anywhere for a future breach to expose. Closing or refreshing the tab discards everything.
You can check this yourself: open your browser's developer tools, switch to the Network tab, and run any of the tools. The page makes a handful of requests when it first loads — the page itself, the fonts, the three open source libraries listed below, and one analytics beacon — and all of them are visible in the page source. Running a tool on your file adds no request at all, however large the file is.
Information we do collect
We use Cloudflare Web Analytics to count visits. It records aggregate figures such as page views, referring sites, general country and browser type. It does not use cookies, does not fingerprint your device, and does not build a profile of you across sites.
Its script is written into our pages by hand, not injected automatically, so you can see it for yourself: view the page source and look for cloudflareinsights.com near the bottom. It reports which page was opened, where you arrived from, how quickly the page loaded, and your general country and browser. It is given no access to the files you work on, and the tools pass it nothing. If you block it, every tool on this site still works normally.
Our host, Cloudflare, keeps standard server logs including IP addresses for security and abuse prevention, as any web host does. These relate to page requests only and never contain document contents.
Cookies
stackpetal sets no cookies of its own and does not use browser storage to track you.
Advertising
We may in future show advertising to cover running costs. Advertising providers such as Google may set their own cookies to serve and measure ads, governed by their own policies. This will never give them access to your files, since your files never leave your device. If we introduce ads, we will update this page first.
Third party code
The site loads open source libraries (pdf-lib, pdf.js and JSZip) and web fonts from public content delivery networks. Those providers can see that your browser requested a file, along with your IP address, in the same way any website with external resources works. They receive nothing about your documents.
Children
stackpetal is a general purpose utility and is not directed at children under 13. We do not knowingly collect personal information from anyone, of any age.
Your rights
Data protection laws such as the GDPR give you rights to access, correct and erase personal data held about you. In practice we hold almost nothing: we have no accounts, no email list and no document storage. If you want to know what analytics data relates to you, or want it removed, write to us and we will help.
Changes
If this policy changes, the date at the top will change with it. Material changes will be noted on the home page.
Contact
Questions about privacy can go to [email protected].