# PRIVACY POLICY
**Last Updated:** November 6, 2026
**Effective Date:** November 6, 2026
This Privacy Policy explains how **[Your Application / Company Name]** ("we", "us", or "our") collects, uses, and discloses information when you use our website, tools, and services located at **[https://yourdomain.com]** (the "Service").
---
### 1. OUR CORE PRIVACY PHILOSOPHY (ZERO SERVER STORAGE)
We believe your data belongs strictly to you. Where technically feasible, our document and image processing utilities execute **100% client-side** inside your web browser using HTML5 Canvas, WebAssembly (WASM), and Web Workers.
- Your uploaded PDF files, images, and documents are **never uploaded to, logged by, or saved on our servers**.
- Files remain in your device's volatile memory and are cleared when you refresh or close your browser tab.
---
### 2. INFORMATION WE COLLECT
#### A. Information You Provide Voluntarily:
- **Contact Inquiries:** When you email support at [[email protected]], we collect your email address and message contents solely to resolve your inquiry.
- **Account Data (if applicable):** If you register an account, we store your email address and encrypted password hash.
#### B. Automatically Collected Technical Data:
When you visit the Service, our hosting and CDN providers (e.g., Cloudflare) automatically collect standard HTTP server log telemetry:
- Browser user-agent and operating system;
- Anonymized IP addresses for DDoS mitigation and geolocation routing;
- Referring URLs and timestamped page visits.
---
### 3. COOKIES & LOCAL STORAGE
- **Strictly Necessary Cookies:** We use essential cookies to maintain user sessions and security tokens.
- **Browser LocalStorage:** We store your user preferences (such as Dark/Light theme mode or recent tool history) exclusively on your local device. We do not transmit local storage entries to remote databases.
- **Analytics:** We utilize privacy-friendly, cookieless analytics to count aggregate page views without tracking individual identities across the web.
---
### 4. LEGAL BASIS FOR PROCESSING (EU GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using technical information described above depends on the data concerned:
1. **Legitimate Interests:** To protect our service from automated DDoS attacks and ensure high availability.
2. **Consent:** Where you provide explicit consent to receive optional email newsletters.
---
### 5. YOUR DATA RIGHTS UNDER GDPR & CCPA
Subject to local jurisdiction laws, you have the right to:
- **Right to Access:** Request a copy of the personal data we hold about you.
- **Right to Erasure ("Right to be Forgotten"):** Request that we permanently delete your personal information.
- **Right to Rectification:** Request correction of inaccurate personal data.
- **Right to Opt-Out (CCPA):** We do **not sell or share** personal data to third-party data brokers.
To exercise any of these rights, contact our Data Protection Officer at: **[[email protected]]**.
---
### 6. DATA SECURITY MEASURES
All network traffic between your client device and our service is encrypted in transit using industry-standard **TLS 1.3 / HTTPS encryption**.
---
### 7. CHANGES TO THIS PRIVACY POLICY
We may update this policy periodically to reflect operational, legal, or regulatory updates. We will notify users by revising the "Last Updated" date at the top of this policy.
---
### 8. CONTACT INFORMATION
If you have questions regarding this Privacy Policy, please contact:
- **Entity:** [Your Company Name LLC]
- **Email:** [[email protected]]
- **Mailing Address:** [Your Company Legal Address]