Privacy policy
The controller is Flavien PALLAS, acting as a natural person. SunPDF minimizes data leaving your device and keeps documents separate from advertising and analytics.
Last updated: October 13, 2026
Your PDFs stay local
PDFs are processed in browser memory. They are not sent to SunPDF for editing or stored on our servers by default. Their content, filename, thumbnails and metadata are never sent to advertising or analytics services.
Data that may be processed
- Technical delivery and security data: IP address, network headers, browser type, approximate country and incident logs.
- Language preference, consent choice and bookmark prompt response stored in the browser.
- With consent, GA4 traffic data such as pages, referrer, device, browser, approximate area and interactions. Never PDF content.
- Advertising data handled by Google AdSense, Google Ad Manager and, where consent permits, AppLixir: identifiers, IP address, device, ad interactions and consent signals.
- Information you voluntarily send by email or telephone.
Purposes and legal bases
- Deliver, secure and diagnose the service: legitimate interests and your request.
- Remember language, consent and the bookmark prompt response: necessary functionality and legal compliance.
- Google Analytics audience measurement: consent where required.
- Personalized advertising: consent. After refusal, only compatible non-personalized, limited or contextual advertising may be attempted.
Technical incident diagnostics
When enabled, an EU Cloudflare D1 journal helps diagnose failures, based on our legitimate interest in maintaining the service. It uses no cookies or user identity, including after Analytics refusal or with GPC. It stores only controlled technical codes and context, timestamps, application versions and random incident identifiers. This table contains no PDF content or filenames, raw messages or stacks, IP addresses or Analytics identifiers. Cloudflare still processes network metadata needed for hosting. You may exercise your right to object using the contact details below.
Voluntary feedback after export
An optional questionnaire follows export handoff. A rating alone stays in the tab. Sending a message shares the rating, entered text, limited technical context (tool, export format and options, up to five recently visited tools, browser and major version, system, estimated device type and brand, language and SunPDF version) via Cloudflare to the operator’s mailbox. No document, filename, Analytics identifier, IP address or full history is automatically attached. Detection may be approximate. Submission is your explicit action and does not depend on Analytics consent. Only a local deadline is stored: 28 days after a rating or one day after skipping. You may request deletion using the contact below.
Recipients and transfers
Cloudflare may receive necessary hosting and security data. Google may receive Analytics, AdSense and Ad Manager data. AppLixir may receive data for certain video ads. They may process data outside the EEA under their respective safeguards and policies.
Retention
| Data | Planned maximum |
|---|---|
| Language preference | 12 months |
| Consent choice | 6 months |
| Bookmark prompt response | Until browser data is cleared or 30 days after postponement |
| GA4 user and event data | 14 months |
| D1 technical journal | 30 days, hourly bounded purge. Time Travel backups up to 7 additional days on Free |
| Export feedback | Target of 90 days in the mailbox, manually deleted. questionnaire deadline until expiry or browser data deletion |
| Contact correspondence | For the request, then 3 years after the last exchange |
| Provider cookies | Depends on the tracker and region, as detailed in the Cookie Policy |
Your rights
Depending on your situation, you may request access, correction, deletion, restriction, objection or portability, withdraw consent at any time, and complain to your data protection authority.
Contact: flavien.pallas@sunpdf.app or +33 6 13 85 31 20.