Privacy — VoilàPDF

In two sentences

Your documents are read and edited by your browser; they are sent nowhere and we cannot see them. The only data we receive is what you deliberately write to us in the contact form.

What the site does not do

These are not statements of intent: they can be checked in the source code, which is public.

No cookies. The site sets none, neither technical nor advertising. That is why you see no consent banner: there is nothing to consent to.
No analytics. No Google Analytics, no equivalent. We do not know how many people visit the site, nor what they do on it.
No storage on your device. No localStorage, no local database. Close the tab and nothing remains.
No account. Nothing to create, so no username, no password, no email address needed to use the tools.
No remote fonts. Fonts are served from our own domain; no call is made to Google Fonts or any equivalent.

Your documents

All twenty-six tools run entirely in your browser, in JavaScript and WebAssembly. The file you drop is read from your disk by the page itself, transformed in memory, then saved back to you. At no point does it pass through a server.

This is not an internal policy we could quietly change: the site is a set of static files, with no code capable of receiving a document. You can check it yourself — open a tool, cut your connection, it keeps working.

One limit worth knowing, which concerns your privacy rather than ours: when you edit or hide text in a PDF, the old text remains inside the file, visually covered. This is not redaction. Do not use it to conceal sensitive data before sending a document on.

The three exceptions, stated plainly

Three features, and only those, cause an exchange with the outside world. Each is flagged on the page concerned.

Hosting: The site is hosted by Netlify, which, like any host, records technical logs: IP address, date, page requested, browser used. These logs serve to run and secure the service. We do not read them and draw no statistics from them.
Summarise and translate a PDF: These two tools use a language model that runs on your machine. On first use the model itself is downloaded from Hugging Face, which then sees your IP address — as any site you visit does. The direction matters: the model comes down to you, your document never goes up. Later runs call nothing, as the browser keeps the model in cache.
Contact form: If you write to us, your name, email address, message and any attachment are sent to and stored at Netlify. The bot check on that page, Altcha, calls nobody: the challenge is issued by our own server, solved by your browser, then verified here. No IP address is handed to a third party.

Transfers outside the European Union

Netlify and Hugging Face are companies established in the United States. The technical data described above, along with messages sent through the form, may therefore be processed outside the European Union, under standard contractual clauses and the EU–US Data Privacy Framework.

Avoiding exactly that transfer is why document processing stays on your machine.

Retention

Messages received through the form are kept for as long as it takes to handle your request, and at most three years, after which they are deleted. You may ask for their erasure at any time.

The host’s technical logs follow Netlify’s own retention policy and are outside our control.

Your rights

The General Data Protection Regulation gives you rights of access, rectification, erasure, restriction, objection and portability over data concerning you. In practice this covers only the messages you may have sent us: that is the only thing we hold.

To exercise these rights, write to aubryetienne@icloud.com or use the contact page. If our answer does not satisfy you, you may refer the matter to the French data protection authority, CNIL, 3 place de Fontenoy, 75007 Paris, or file a complaint at cnil.fr.

Data controller

Fix72, sole trader, 6 impasse Élisabeth Vigée Lebrun, 72000 Le Mans, France — SIRET 512 645 045 00042. Full details are in the legal notice.