Privacy policy

On this page

• Your files stay on your device
• What your browser downloads, and from where
• Hosting, security and analytics
• Cookies and data stored in your browser
• Advertising
• If you email us
• Children
• Your choices
• Changes to this policy
• Contact

Your files stay on your device

When you drop a file into an EditZap tool, it is read by code running in your browser tab, processed in your device's memory, and handed back to you as a normal download. The file, its name and its contents are never sent to EditZap or to any other server. The same applies to anything you type into a tool, such as a PDF password, watermark text, the contents of a QR code or a signature you draw.

This is not a promise about how we treat uploads, because there are no uploads: EditZap is a set of static web pages, and there is no EditZap server that receives files at all. You can check this yourself. Open your browser's developer tools, switch to the Network tab and use a tool. You will see code and data coming in, but no request carrying your file going out.

What your browser downloads, and from where

To keep pages light, each tool loads the code it needs from public content delivery networks (CDNs) when you open it. Fonts are served from editzap.com itself. A few tools also need larger data files the first time you use them. Everything in this list is a download to your device. None of these servers ever receives your files.

• cdnjs.cloudflare.com — open-source code libraries, for example the PDF reader (PDF.js), ZIP creation, Word and Excel readers, HTML-to-PDF, HEIC decoding and QR code drawing.
• cdn.jsdelivr.net — open-source code libraries, for example the OCR engine behind Image to Text, the AI runtime behind Remove Background, the PDF encryption and decryption engines behind Protect PDF and Unlock PDF (the other PDF tools also load the decryption engine when you open a password-protected PDF), and the Word file writer behind PDF to Word.
• unpkg.com — the open-source PDF editing library used by tools such as Merge, Split, Rotate and Watermark PDF.
• huggingface.co and its file-download servers on hf.co — the AI model used by Remove Background (tens of megabytes), downloaded the first time you use that tool.
• tessdata.projectnaptha.com — OCR language data for Image to Text (a few megabytes per language), downloaded the first time you use each language. This host is served through GitHub Pages.

What these servers can see. Like any request your browser makes, each download reveals your IP address, your browser type (user agent), the file being requested and, usually, that the request came from editzap.com. They do not receive your files or anything you type into a tool. What they do with their own request logs is covered by their own policies, for example Cloudflare, jsDelivr, Hugging Face and GitHub.

Hosting, security and analytics

EditZap is hosted on Cloudflare. As with any website, Cloudflare processes each request for a page, including your IP address, browser type and the address of the page, so that it can deliver the site and protect it from attacks and abuse.

• Analytics. We use Cloudflare Web Analytics to see how the site is used. A small script, loaded from static.cloudflareinsights.com, sends a measurement beacon to Cloudflare when a page loads. It reports page views and page-load speed. Cloudflare states that Web Analytics does not use cookies or local storage and does not fingerprint visitors. We only see aggregate figures, such as which pages are popular, which sites sent visitors, and broad browser, device and country breakdowns. We cannot identify or follow individual people.
• Bot protection. Cloudflare may run a short check to tell real browsers from automated bots, and may set a strictly necessary security cookie (such as cf_clearance or __cf_bm) while doing so. These cookies are there to keep the site secure. They are not used for advertising or to track you across websites.
• Error reports. If a page fails to load, your browser may send Cloudflare a short technical error report (to a.nel.cloudflare.com) so network problems can be detected.

Cookies and data stored in your browser

EditZap's own code sets no cookies, and it does not use local storage to remember anything about you. There are no accounts, no sign-up forms, no social-media buttons and no advertising or tracking pixels. The only cookies you might see come from Cloudflare's security features described above.

To save you from downloading the same large files again, two tools keep a copy in your browser's own storage on your device:

• Image to Text (OCR) stores the language data in your browser's IndexedDB storage.
• Remove Background stores the AI model and its runtime files in your browser's Cache Storage.

Your browser also keeps its usual cache of pages and code libraries. None of this contains your files or personal information, it stays on your device, and nobody can read it from outside your browser.

How to clear it. Delete the site data for editzap.com in your browser. Menu names differ slightly between versions:

• Chrome and Edge: on editzap.com, click the icon to the left of the address bar, open the site settings or the cookies and site data section, and delete the data stored by the site.
• Firefox: click the padlock to the left of the address bar and choose Clear cookies and site data.
• Safari on Mac: open Settings > Privacy > Manage Website Data, find editzap.com and remove it.
• Phones and tablets: look for site data or website data in your browser's settings.

Clearing it does no harm. The tools keep working and simply download what they need again the next time you use them.

Advertising

EditZap does not currently show ads. It is free to use, and in the future we may show ads through Google AdSense to cover running costs. If we do:

• Third-party vendors, including Google, would use cookies to serve ads based on your previous visits to this and other websites. Google's use of advertising cookies lets it and its partners show you ads based on those visits. You can read how Google uses cookies in advertising, and you can turn off personalised advertising in Google's Ad Settings.
• Before any ad appears, we will update this policy and add a consent choice to the site, so you can accept or refuse advertising cookies.
• Your files would still be processed on your device, exactly as they are now.

If you email us

If you write to us, we receive your email address and whatever you put in your message. We use it only to read and answer your message and to fix what you report. We do not add you to any mailing list and we do not sell or share your details. You can ask us to delete your messages at any time. Please never attach confidential files. Describe the problem instead.

Children

EditZap is a general-purpose tool and is not aimed at children. Because it has no accounts, forms or tracking, EditZap does not ask anyone for personal information, children included. If a child has emailed us and a parent or guardian would like that message deleted, contact us and we will delete it.

Your choices

• You can use every tool without giving us any personal information.
• You can clear or block the data stored in your browser at any time, as described above.
• Blocking the analytics script with a content blocker does not affect any tool.

Changes to this policy

If we change how the site handles data (for example, before any ads are shown), we will update this page and the "Last updated" date at the top. We will not start collecting new kinds of data without describing it here first.

Contact

Questions about privacy, or about anything on this page? Get in touch.