Privacy Policy

OnsitePDF provides PDF tools that run entirely in your browser. The contents of the PDF files you open are processed on your device inside a Web Worker and are never uploaded, transmitted, or stored on any server. This policy covers the limited account, billing, advertising, analytics, and error-monitoring data described below. We honor the privacy rights set out here for all users, wherever you live.

Who we are

OnsitePDF is operated by DigitalForge S.A.S., a company based in Mexico. You can reach us about privacy at privacy@digitalforge.mx.

Data we collect

• Account data (only if you sign in): your email address, your Google account identity if you use Google sign-in, and an OnsitePDF user id. We store only account metadata — user id, a premium true/false flag, and timestamps.
• Billing data (only if you subscribe): your card and billing details are collected and processed by Stripe; OnsitePDF never sees or stores your card number.
• Advertising data (only where ads are shown): Google may set advertising cookies and use device identifiers and your IP address to deliver ads. Ads are never shown on file-processing or sign-in pages.
• Analytics: aggregate, cookieless usage statistics via Plausible.
• Error diagnostics: technical error reports via Sentry, aggressively scrubbed to strip file bytes, file names, extracted text, emails, user ids, and session/auth tokens before any event is sent.
• We never collect the contents of your PDF files.

How we use it and our legal basis

We use account data to sign you in, billing data to provide the premium subscription, advertising data to fund the free tools, analytics to understand aggregate usage, and error data to fix bugs. Our legal bases are: performing our contract with you (accounts and billing); your consent (advertising cookies, where shown); and our legitimate interests in understanding aggregate usage and keeping the service secure and working (analytics and error diagnostics).

Who we share it with

We share data with these service providers, each for the purpose above:

• Supabase — authentication and account metadata.
• Stripe — payment processing.
• RevenueCat — subscription entitlement management.
• Google (AdSense) — advertising.
• Plausible — cookieless analytics.
• Sentry — error monitoring.

Supabase, Stripe, RevenueCat, Plausible, and Sentry process this data only on our behalf, as our service providers. Google (AdSense) acts as an independent controller for delivering ads.

International transfers

Several of these providers are based in the United States and may process data outside your country. Where required, these transfers rely on the providers' standard contractual clauses and data-processing agreements.

How long we keep it

Account metadata is kept while your account is active and deleted when you close it. Analytics and error diagnostics are retained according to each provider's standard retention period and are not used to identify you.

Your rights

Wherever you live, you may ask us to access, correct, delete, restrict, or port your data, object to processing, and withdraw consent at any time. You can also lodge a complaint with your local data-protection authority. To exercise any right, contact us at privacy@digitalforge.mx.

Cookies

See our Cookie Notice for the technologies we use and how to manage consent.

Children

OnsitePDF is a general-audience service and is not directed at children.

Contact

Questions about this policy: privacy@digitalforge.mx.