Your PDFs never leave your device. All processing happens in your browser.
No tracking. No analytics cookies, no advertising pixels, no third-party trackers.
No data sales. We never sell or rent your personal information to anyone.
Your work stays on your device. Your PDFs, typed text and practice history never leave your browser. Only your account and plan are held on our servers.
01 Introduction
TypeFromPDF ("we", "us", "our") operates the website typefrompdf.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable data protection laws including the General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act.
Our core design philosophy is privacy by default. We collect the minimum data necessary to provide the Service and no more.
02 Data We Collect
Account information (stored in your browser's localStorage):
- Your name and email address when you create an account
- A hashed version of your password
- Your subscription plan status (free or paid)
- Your PDF upload count and the current month (to enforce plan limits)
We do NOT collect:
- Your IP address (beyond what any standard server log captures for security)
- Your PDF files — these are processed entirely in your browser
- Your typing content or what you typed
- Behavioral analytics, click tracking, or session recordings
- Device fingerprints or identifiers beyond standard web security
03 How Your PDF Files Are Processed
This is our most important privacy guarantee: your PDF files are processed 100% in your browser using the PDF.js JavaScript library. They are never uploaded to any TypeFromPDF server and never stored anywhere outside your device.
When you upload a PDF, the following happens entirely on your device:
- The file is read by your browser
- PDF.js extracts the text layer from the PDF in memory
- The extracted text is displayed in the typing interface
- When you close or refresh the tab, all data from that PDF is gone
We have no technical access to your PDF files. This is by design, not just policy.
04 Browser Storage
Two different things are stored in two different places, and the distinction matters.
Your documents and your practice stay in your browser. The text extracted from your PDFs, everything you type, your typing sessions and your statistics are held in your own browser's storage on your own device. They are never uploaded to us.
Your account and your subscription are held on our servers, because they have to be: your plan must be the same on your phone as on your laptop, and it must survive you clearing your browser. See section 05.
| Key | Type | Contents | Expires |
|---|---|---|---|
| sb-<project>-auth-token | localStorage | Your Supabase sign-in session. Set by our authentication provider so you stay logged in. | On logout, or when the session expires |
| tfp_index:<account> | localStorage | The list of your typing sessions — name, mode, language, date, page count and statistics. No document text. | Until you delete them or clear browser data |
| tfp_current:<account> | localStorage | Which session you had open, so it reopens where you left it. | Until browser data is cleared |
| tfp_plan:<account> | localStorage | A copy of your plan and expiry date, so a brief loss of connection does not lock you out of what you paid for. Never treated as proof of payment — the server always decides. | 3 days |
| tfp_prefs | localStorage | Your preferences (sound, scrolling, results). | Until browser data is cleared |
| tfp_g | sessionStorage | Count of PDFs used in the current guest session (max 2). | Tab close |
IndexedDB tfp | IndexedDB | The text extracted from your PDFs and the text you have typed, one record per session. This is the private content, and it is only ever here. | Until you delete the session or clear browser data |
You can delete all of this at any time by clearing your browser's site data for typefrompdf.com. Doing so deletes your documents and practice history permanently — we hold no copy — but it does not delete your account or cancel your subscription, which are held on our servers and will be there when you sign in again.
05 Payment Data
When you purchase a subscription, payment is processed by Paddle (paddle.com), our authorized Merchant of Record. TypeFromPDF never sees, handles, or stores your credit card number, bank details, or any financial information.
Paddle may collect and process your name, billing address, email, and payment information under their own privacy policy, which governs their data practices. We recommend reviewing their policy at paddle.com/legal/privacy.
Upon successful payment, Paddle notifies us that a purchase was completed. We use this to update your plan status in your browser account — that's all.
06 Cookies & Third-Party Services
TypeFromPDF uses no advertising cookies and no analytics tracking. We do not embed Facebook pixels, Google Analytics, or any similar tools.
We rely on the following third-party services which may load resources from their domains:
- Google Fonts (fonts.googleapis.com) — loads the Inter and JetBrains Mono typefaces. Google may log font requests. See Google's Privacy Policy.
- Cloudflare CDN (cdnjs.cloudflare.com) — delivers the PDF.js library. Cloudflare may log CDN requests. See Cloudflare's Privacy Policy.
- Paddle (paddle.com) — our payment processor and merchant of record. Loads only when you initiate a purchase, and handles your payment details; we never see or store a card number.
- Supabase (supabase.com) — hosts our authentication and our database. Your email address, password hash, name, plan and subscription dates are held here. See Supabase's Privacy Policy.
- Resend (resend.com) — sends transactional email: purchase confirmations, renewal reminders and password resets. Receives your email address and the content of those messages, and nothing else. See Resend's Privacy Policy.
- Web3Forms (web3forms.com) — delivers messages sent through our contact form. Receives the name, email address and message you type into it. See Web3Forms' Privacy Policy.
- Vercel (vercel.com) — hosts the website and its server functions. See Vercel's Privacy Policy.
These providers process data on our behalf and may store it outside your country, including in the United States. None of them ever receives your PDFs, the text extracted from them, or anything you type.
See our Cookie Policy for a full breakdown.
07 How We Use Data
The limited data we handle is used solely to:
- Operate your account and enforce plan limits (PDF upload counts)
- Process subscription payments and deliver purchase confirmations via Paddle
- Respond to support requests you submit to us directly
- Send transactional emails (receipts, renewal reminders) — we do not send marketing emails
We do not use your data for advertising, profiling, or resale.
08 Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and UK, our legal bases for processing personal data are:
- Contract performance — processing your name, email, and payment details to fulfill your subscription agreement
- Legitimate interests — maintaining security and preventing fraud
- Legal obligation — complying with applicable laws and regulations
We do not process personal data based on consent for marketing purposes, as we do not conduct direct marketing.
09 Data Retention
Your documents, typed text and practice history stay in your browser until you delete them or clear your browser data. We hold no copy of any of it.
Your account record — name, email address, plan, subscription dates and Paddle identifiers — is retained for as long as your account exists, and afterwards only as long as we are required to keep records of a transaction. To have your account deleted, email support@typefrompdf.com.
If you contact us via email, we retain that correspondence for as long as needed to resolve your inquiry and for any legal record-keeping requirements (typically up to 3 years).
10 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate personal data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing of your personal data
- Restriction — request that we restrict processing of your data
Since most of your data is stored locally in your own browser, you can exercise many of these rights directly by clearing your browser data. For data held by us (support emails, payment records), contact us at support@typefrompdf.com.
11 Children's Privacy
TypeFromPDF is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.
12 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of the Service after changes constitutes your acceptance of the updated policy.
13 Contact
For any privacy-related questions, requests, or concerns, please contact us:
- Email: support@typefrompdf.com
- Contact form: typefrompdf.com/contact
We will respond to privacy requests within 30 days.