Datenschutzerklärung

1. Your documents are never uploaded

This is the most important thing in this policy, so it comes first. When you convert a PDF on mypdf2md.com, the file is read from your device by JavaScript running in your browser tab and parsed there. It is not transmitted to us, and we never possess it, store it, or process it.

You can verify this rather than take our word for it: open your browser's developer tools, switch to the Network tab, and run a conversion. No request carries the file or its contents.

This extends to the supporting files. The PDF.js worker and font data are served from mypdf2md.com rather than a third-party CDN, so no outside party learns that a conversion took place.

2. What we do not collect

• The contents of any document you convert
• The text extracted from it
• The file itself, in whole or in part, at any point

3. What we do collect

The following is the complete list. If something is not here, we do not collect it.

• Account data, if you sign in. We store your email address so we can authenticate you. Authentication is handled by Supabase on our behalf.
• Local preferences. Your chosen language, light or dark theme, and your cookie consent choice are stored in your browser's local storage. They stay on your device.
• Server logs. Our hosting provider records standard request logs, including IP address, user agent and requested URL, for security and abuse prevention.
• Advertising data, only if you consent. See the advertising section below.

4. Cookies and local storage

We use local storage for strictly necessary purposes without asking, because the site cannot function otherwise: remembering your language, your theme, and the consent choice you made on the banner.

Anything beyond that is opt-in. Nothing from Google or any other third party loads until you actively accept advertising cookies on the consent banner. If you decline, or simply ignore the banner, no advertising script is ever added to the page.

You can change your decision at any time using the Cookie settings link in the footer.

5. Advertising

The web version is free and funded by advertising. If you consent, we load Google AdSense, which uses cookies and similar technologies to select and measure ads. In that case Google is an independent controller of the data it collects, governed by its own privacy policy.

Google may use your IP address, browsing activity on this site, and its own cookies for ad personalisation. You can review and adjust this at adssettings.google.com.

Ad code has no access to your documents. Conversion happens before and independently of any ad request, and the converted text never leaves the page.

6. Who processes data for us

• Supabase — authentication and database hosting, for accounts and site configuration
• Vercel — website hosting and request logging
• Google AdSense — advertising, only after you consent

7. Legal bases for processing

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: contract, for the account data needed to sign you in and provide the service; legitimate interests, for security logging and abuse prevention; and consent, for advertising and any optional analytics. Where we rely on consent you may withdraw it at any time, without affecting processing carried out before withdrawal.

8. International transfers

Our processors may store and process data outside your country, including in the United States. Where required, transfers are covered by the appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

9. Retention

Account data is kept for as long as your account exists. Delete your account and it is removed, along with anything linked to it. Server logs are retained by our hosting provider on their standard schedule, typically no more than 30 days. Because we never receive your documents, there is nothing to retain about them.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable form, and withdraw consent. To exercise any of these, contact us using the details below.

You also have the right to complain to your local data protection authority.

11. Children

The service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the product changes. The date at the top of this page always reflects the most recent substantive revision. Material changes will be signalled on the site before they take effect.

13. Contact

This service is operated by , based in . For any privacy question or to exercise your rights, email privacy@mypdf2md.com.