Privacy policy

Last updated: 22 September 2026

AquaPDF (aquapdf.com) provides free online PDF tools. This page explains, in plain language, what happens to your files and what little data we keep. Questions: [email protected].

Your files

• Used only for your conversion. Files you upload are sent over HTTPS to our server and used solely to perform the tool you chose. We do not open, read, analyse, or share them, and no person looks at them.
• Originals are deleted immediately. The file you uploaded is removed automatically the moment the conversion finishes — whether it succeeded or failed.
• Results are deleted after 60 minutes. The converted file is kept only so you can download it, then deleted automatically. A live countdown shows exactly when.
• You can delete instantly. "Delete file now" on the result screen, or "Delete" in My files, removes the file from our server at once.
• No copies, ever. We keep no backups, previews, or archives of your files beyond the above.

What we do keep

• A minimal usage record for each completed conversion: which tool was used, the time, your IP address, and your account if you were logged in. It contains no file names and no file contents. The IP address is used to prevent abuse (rate limiting, blocking bots) and is removed after 90 days; only the anonymous tool-usage count is kept after that.
• Your account, if you create one: name, email address, and a hashed password (we cannot see your password). Accounts are optional — the tools work without one.

Cookies

• One essential session cookie. It keeps you logged in, protects forms against forgery, and lets you find files you converted as a guest for 60 minutes. It is not used for tracking or advertising.
• A Cloudflare security cookie (such as __cf_bm) may be set by our security provider to tell humans apart from bots. It is strictly necessary and contains no personal profile.
• No tracking. We use no advertising cookies, no third-party trackers, and no analytics cookies. Visitor counts come from Cloudflare's cookie-less, privacy-first web analytics, which cannot identify you.

Service providers

A small number of providers process data only to run the service: Cloudflare (CDN, DDoS and bot protection — traffic passes through it), Zoho Mail (sends account emails such as password resets), and OVH (server hosting in France, EU). We do not sell or share your data with anyone else.

Emails

We only send emails you trigger — for example a password reset — plus important notices about your account. No newsletters, no marketing.

Your rights

You can ask us to show or delete the data linked to your account at any time by emailing [email protected]; we delete accounts on request. Your files need no request — they are already deleted automatically as described above.

Children

AquaPDF is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes, we will update this page and the date at the top.