What we do and do not know about you
In one paragraph
You do not have an account with us, because there are no accounts. We do not ask for your name or your email. Everything this product does to your document happens inside your browser and never reaches us at all. Three things can put a request on the wire today, and they are named below rather than hidden: your browser's own spell-check, the link import that asks a site you name for a file (we see none of it — there is no proxy), and the planned assists that would send something to a machine we run only when you chose to use them, after asking first. Nothing sent would be stored, and nothing would be used to train anything.
What stays on your device
Everything the editor does today: opening a PDF, editing its text, signing, filling forms, combining files, pulling pages out, reordering, rotating and marking up — and compressing, adding a password, comparing two versions, reading a scanned page, using the camera for a page or a signature, removing marked content for good, or running a tool across every open file. None of it reaches us; the tools that are still being built are being built to work the same way, on your device.
You can confirm this: open your browser's network panel and use the editor, or disconnect from the internet and carry on working. The checks live at how your files are handled.
The things that would leave — none without a label
One of these is live today, one is built but switched off, and two are planned. Each sends only what the table names, only when you chose to use it, and asks first where a choice is involved.
| When | What is sent | Why |
|---|---|---|
| Bringing in a file from a link (live) | The request itself — to the site you name; we see none of it, there is no proxy | Your browser fetches the file directly; that site sees the request |
| Cleaning a signature's background on our server (built, off) | The signature picture only — never the document | A bigger machine cleans it better than a browser tab; deleted after processing |
| A scan too hard for the on-device reader (planned) | The page image | Recognising handwriting is much better on a bigger machine than a browser tab |
| Matching an unusual font (planned) | The font file only — never the document | To find a stand-in that matches |
These rules bind every one of them:
- Nothing of yours is stored by us. Each job is processed and dropped — no copy kept of your document or of the text sent from it.
- Failures are logged, never content. If a job errored we record that it errored and enough to fix it — never the words being processed.
- Nothing is used to train anything.
- You can turn all of it off. One setting — work on this device only — stops anything being sent, permanently, until you change it back.
Your browser's own spell-check
Your browser's own spell-check is the one thing that can send text you type to a third party today, and it is not ours. We leave it on so typos get caught — but in its online mode (off by default in most browsers) it can send what you type to your browser's maker. That is the browser's request, not ours, and our own no-egress setting cannot stop it, so we name it here rather than pretend it away. The work on this device only switch — in Settings and on how your files are handled — turns even that off.
What is kept on your device
Held in your browser's own storage, never sent to us, and cleared whenever you clear it:
- Documents in progress, for 7 days, so closing a tab does not lose your work.
- Your signature, if you made one.
- Small preferences — light or dark, and font choices you have made before.
There is a Clear button in Settings that removes all of it and says exactly what goes.
What we do not do
- No accounts, so no account data.
- No advertising, and no advertising networks.
- No selling or sharing anything with anyone.
- No analytics or tracking scripts on the pages where you work with a document.
- No cookies for tracking. We set none.
Getting these pages to you
The site runs on Cloudflare. Every page you open — this one included — is delivered by their edge network, and delivering it means their systems see the request they answer: your IP address, the same as any site you visit. That is the only personal data handled in getting the site to you, and it is handled by Cloudflare under its own policies. What reaches us is the aggregate count — how many visits a page gets — never who the visits were.
Your rights
Because we hold no personal data about you and have no way to identify you, most data-protection rights have nothing to attach to. There is no account to access, correct or delete; deleting everything we hold is a button in Settings, on your device.
For the tools that send something, you decide what to send and press the button; the job runs, the result returns, and nothing is kept. That is our provisional position, pending counsel's review — the questions a lawyer will settle are recorded in our drafts, and the reviewed text replaces this page when it lands.
Children
Not directed at children, and collects nothing from anyone.
Changes
If this changes, the page changes, with the date. There is no mailing list to notify, because we do not have your email.
Contact
hello@remixpdf.com · privacy questions to the same address.
Last updated 2026-09-18.