Legal
Privacy Policy
Last updated: 15 June 2026
1. Controller
2. Your files never leave your device
Cloudless is a set of PDF tools that run entirely in your web browser. When you compress or merge a PDF, the file is processed locally on your own device. Your documents are never uploaded, transmitted, or stored on our servers or anyone else's — they simply never leave your computer. We never see, receive, or have access to your file contents.
3. No cookies, no tracking
This website sets no cookies and stores nothing on your device (no localStorage, no sessionStorage). We use no advertising, no third-party trackers, and no cross-site profiling. Because we neither store nor read information on your device for non-essential purposes, no consent banner is required under the ePrivacy Directive / § 25 TTDSG.
4. Server log files
When you load the website, the hosting server automatically processes technical access data (e.g. IP address, date and time, the page requested, amount of data transferred, referrer URL, and browser/operating-system information). This is technically necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). These log data are deleted after a short period unless needed to investigate a security incident.
5. Hosting
The website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) and delivered via Cloudflare's global content-delivery network. In doing so, Cloudflare processes technical access data (see "Server log files") as a processor, also to ensure security and availability. This is based on a data-processing agreement (Cloudflare Data Processing Addendum) under Art. 28 GDPR. As Cloudflare is a US company, data may be transferred to the USA; such transfers are safeguarded by Standard Contractual Clauses (Art. 46 GDPR) and Cloudflare is certified under the EU–US Data Privacy Framework.
6. Anonymous usage statistics
To understand which tools are used and to improve the service, we record anonymous, aggregated usage events — for example, that a page was viewed or that a "compress" action completed. These events contain no personal data and no file information. We use no cookies and no device storage for this; a random identifier is generated only in memory for the duration of a single page view and is never persisted or linked to you. IP addresses are not stored together with these events. The events are stored in Cloudflare D1 (a database hosted in the EU). The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in measuring and improving the service). We do not create user profiles.
7. "Pro" interest survey
On the Pro page you can optionally indicate, with one click, what a Pro plan would be worth to you. We record only the anonymous choice (e.g. "€6/month"). No email address or other personal data is collected.
8. Contacting us by email
If you contact us by email, your details (email address and the content of your message) are processed to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR. The data are deleted once they are no longer needed.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR). You also have the right to lodge a complaint with a data-protection supervisory authority.
10. Changes to this policy
We may update this policy as the service evolves. The current version always applies and is dated at the top of this page.