Privacy policy

Controller

The controller is FREELLIA, publisher of PDF Anonymizer. For any privacy request, you can write to xavier.sheojore.pro@gmail.com.

Data processed

When you use the service, the following categories of data may be processed.

• Uploaded PDF, extracted text and personal data contained in the source document, solely to perform the requested anonymization.
• Anonymized PDF, HTML preview, generated identifier, page count, removed categories, review report and technical processing ID.
• Delivery email address entered by the user, used to send the processing status and, on success, the anonymized PDF as an attachment.
• User account: login email address, hashed password, essential session, free trial or subscription status, selected plan and data required to enforce usage limits.
• Technical information needed to operate the website, such as IP address, timestamp, server logs and application errors.
• Payment information processed by Stripe when the subscription is enabled. PDF Anonymizer does not store card details.
• Execution report sent by email to the service publisher when SMTP is configured. This internal report does not include the PDF as an attachment.

Purposes

• Check that the file is a usable PDF.
• Remove detected personal data and generate an anonymized PDF.
• Add a short identifier on the first page when requested.
• Allow temporary download of the result.
• Send the user the anonymization status and the anonymized PDF when processing succeeds.
• Authenticate users, limit free usage, manage monthly plans and secure the service.
• Monitor technical failures, PDF generation fallbacks and processing quality.

Legal bases

Processing required for anonymization and download is based on performance of the service requested by the user. Security, abuse prevention, technical monitoring and service improvement are based on the publisher's legitimate interest. Billing-related processing is based on contractual performance and applicable legal obligations.

Retention periods

• The source PDF is used for processing and is not retained as an original file by the application.
• The anonymized PDF, HTML preview and technical report are temporary files intended to be deleted after a short retention period, configured to 60 minutes in production.
• The delivery email address is not stored in the technical processing report. It is used during execution of the request and may appear in the email provider's logs according to that provider's own retention rules.
• The user account and usage state may be kept while the account remains active, then for as long as required to manage legal obligations, security and potential disputes.
• Hosting provider technical logs may be retained according to Render's settings and policies.
• Billing data may be retained for the legally required periods when a subscription is enabled.

Recipients and processors

Data may be processed by the providers required to operate the service.

• Render, for application hosting, temporary storage and technical logs.
• Anthropic, when Claude is used to strengthen identification of PDF elements to remove.
• Stripe, when payment or subscription is enabled.
• The configured SMTP provider, to send internal reports without PDF attachments and user emails containing the anonymized PDF when processing succeeds.

Transfers outside the European Union

Some technical providers may be established outside the European Union, including in the United States. Where applicable, transfers are governed by the contractual safeguards and security measures offered by these providers.

Cookies

The website only uses cookies that are essential to the service: storing the selected language and maintaining the account session. No advertising cookie or non-essential analytics tool is currently used.

Your rights

You may request access, rectification, deletion, restriction or objection to the processing of your personal data where these rights apply. You can exercise these rights by writing to xavier.sheojore.pro@gmail.com.

You also have the right to lodge a complaint with the French data protection authority, the CNIL.

Security

PDF Anonymizer uses HTTPS, does not attach PDFs to internal monitoring emails and limits retention of generated results. The anonymized PDF may be sent to the email address provided by the user. Users should nevertheless avoid uploading documents they are not authorized to process.