ZasPDF Privacy Policy
Last updated: August 28, 2026
This policy sets out exactly what data ZasPDF ("the Application", "we", "us") handles, and what it does not. Two things are worth separating, because they are often conflated: the contents of your files never leave your device, while browsing this website does involve cookies, analytics and advertising, like any ad-supported site. Both statements are true at once, and each is detailed below.
1.Your files: 100% local processing
ZasPDF tools run entirely inside your browser. The engine that merges, splits, compresses, encrypts or rotates PDFs is written in Go and compiled to WebAssembly; it downloads once and then runs in your own machine's memory and processor. No network request ever carries your document.
- We do not upload your documents to the cloud or to any external server.
- We do not store copies of your files, not even temporary ones.
- We have no access — and can have no access — to the contents of your documents.
- The tools keep working if you disconnect from the network after the page loads. That is the simplest way to verify this yourself.
Files you generate are downloaded straight from your browser. Keeping them safe afterwards is your responsibility.
2.What we actually collect
File contents and filenames: nothing. Neither is ever collected or transmitted.
Site usage (Google Analytics 4, id GT-KD7K4PMZ): pages visited, language, approximate country derived from your IP address, device type and browser. We also send two custom events, tool_used and file_downloaded, whose only parameter is the name of the tool used (for example merge). The name, size and contents of your file are never attached.
Account data (optional): only if you create an account or sign in. Authentication is handled by Google Firebase Authentication, and we retain your email address, display name, profile photo and user id. You can register with email and password, with Google, or with Apple. Browsing the site and using every tool requires no account.
Server logs: the site is hosted on Cloudflare Pages, which logs requests (IP address, user agent, timestamp) in order to serve content and protect it from abuse.
Advertising: see section 3.
3.Advertising and third parties
ZasPDF is free and is funded by advertising. We work with Google AdSense (publisher ca-pub-2641884796904342). This means Google and its partner vendors may use cookies and similar technologies on this site.
- Google uses the
DoubleClick DARTcookie and first-party cookies such as__gadsand__eoito serve ads, cap how often you see the same one, and measure performance. - Third-party vendors may serve ads based on your prior visits to this and other websites.
- We do not sell your personal data, and we share no documents or anything derived from them with advertisers, because we do not have them.
You can turn off personalised Google advertising at Google Ads Settings, review how Google's partners handle your data at policies.google.com/technologies/partner-sites, and opt out of other vendors' third-party cookies at aboutads.info/choices.
4.Cookies and local storage
This site uses the following. Only the first category is strictly necessary.
| Name | Type | Purpose |
|---|---|---|
zaspdf_consent_v1 | Local storage · necessary | Stores your cookie choice so we do not ask again. |
theme | Local storage · necessary | Remembers whether you prefer the light or dark theme. |
zaspdf_fullname, zaspdf_initials | Local storage · necessary | Reuses the name and initials you typed into the signature tool. They never leave your browser. |
_ga, _ga_* | Cookie · analytics | Google Analytics: distinguishes visitors and sessions. Set only if you accept analytics. |
__gads, __eoi, IDE | Cookie · advertising | Google AdSense: ad selection, frequency capping and measurement. Set only if you accept advertising. |
Local storage keys live only in your browser and are never sent to any server. You can clear them at any time from your browser settings.
5.Consent
We implement Google Consent Mode v2. Analytics and advertising start with every permission set to denied by default: analytics_storage, ad_storage, ad_user_data and ad_personalization. Nothing is enabled until you choose in the banner shown on your first visit. If you decline, any ads you see will be non-personalised.
To change your decision later, clear this site's data in your browser and the banner will reappear.
6.Your rights
If you live in the European Economic Area, the United Kingdom or Switzerland, the GDPR gives you the right to access your data, correct it, erase it, restrict or object to its processing, and to data portability. Our legal basis is your consent for analytics and advertising, and performance of the contract for account data.
If you live in California, the CCPA/CPRA gives you the right to know which categories of data are collected, to request deletion, and to opt out of their "sale" or "sharing". We do not sell personal data within the meaning of that law.
To exercise any of these rights, including deletion of your account and its associated data, write to hi@zaspdf.com from the address you registered with. We answer requests within 30 days at the latest.
7.Retention and children
Account data is kept for as long as the account exists and is deleted when you delete it. Google Analytics data is retained according to the property's configuration, up to a maximum of 14 months. Cloudflare logs follow their own retention schedule. File contents are not retained, because they are never collected.
The Service is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided us with information, write to us and we will delete it.
8.Changes and contact
We will update this policy when features or providers change. The date above always reflects the latest revision, and any substantial change will be announced in the interface itself.
This policy is governed by the data protection rules applicable in the Republic of Colombia, without prejudice to the rights granted to you by the laws of your country of residence. For any question: hi@zaspdf.com or the contact page.
Related documents: Terms of Service, Security architecture and Alternatives to cloud tools.