The short version
The rest of this page explains that in the detail the law expects, and sets out your rights in each of the five countries this site serves. If you only read one section, read the next one.
Your files
Every tool on this site runs inside your browser. Your files are opened, processed and saved on your own device, and are never transmitted to us or to anyone else. You can confirm this yourself: open your browser’s network panel, run any tool, and watch that nothing leaves.
This is the single most important fact in this policy. It means there is no server-side copy of your document to be leaked, subpoenaed, retained past a policy, or found in a backup years later. There is nothing to delete because nothing was ever created.
One narrow exception, and it is still local: when you drop a file on the home page and are taken into a studio, the file is held briefly in your browser’s own IndexedDB storage so it survives the page change. It is deleted the moment the studio reads it, and in any case after five minutes. It never leaves your device.
Who is responsible
Shop Digi Soft, a sole proprietorship based in Hyderabad, Telangana, India, is the data controller for the limited processing described here, at Malakpet, Hyderabad, Telangana, India.
For anything in this policy, write to grab@shopdigisoftware.com.
What is collected
In three categories, from least to most.
- Nothing you type into a tool
- Calculator inputs, page selections, watermark text, the settings you choose — none of it is transmitted. Some tools put your inputs in the web address so you can share or bookmark a result. That address is only sent anywhere if you choose to share it.
- Storage on your device
- A small number of keys, listed in full in the cookie policy and reproduced in the next section. These stay on your device and are not readable by us.
- Server logs
- Like every website, requests reach a web server, which records the request in a log: the address requested, the time, a browser identification string, and an IP address. This is standard operation of a web server rather than a choice to collect data about you, but it is data, and it is honest to say so. Logs are used only to keep the site running and to investigate abuse. They are not linked to anything else and are not used to build a profile.
What is stored on your device
| Name | Type | Purpose | Kept for |
|---|---|---|---|
| theme | localStorage | Remembers whether you chose the light or dark appearance. | Until you clear your browser storage. |
| country | localStorage | Remembers which country you selected, so calculators use the right tax rules, currency, date order and paper size. | Until you clear your browser storage. |
| consent | localStorage | Remembers your choice about analytics and advertising storage, so you are not asked again on every page. | Twelve months, then you are asked again. |
| announce | localStorage | Remembers that you dismissed the strip at the top of the page, so it stays dismissed. | Until you clear your browser storage. |
| recent-tools | localStorage | Remembers which tools you opened, so the home page can offer them again and suggest related ones. | Until you clear your browser storage. Only the last eight are kept. |
| etp-handoff | IndexedDB | Holds a file for a few seconds while you move from the home page into a studio, because a file cannot travel in a web address. | Deleted the moment the studio reads it, and after five minutes regardless. |
All of these are functional: the site cannot do what you asked without them, and under the ePrivacy rules and their equivalents they are exempt from consent. None identifies you, and none is shared with anyone.
Analytics
If analytics is added, it will be used to count visits and see which pages are used, so that effort goes to the tools people actually want. It will be loaded only after you have said yes, it will not run at all if you say no, and the site will work identically either way.
Nothing you type into a tool would ever be sent to an analytics provider, whatever your choice. That is a property of how the tools are built, not a promise about configuration.
Advertising
When advertising is active, a third-party advertising provider — most likely Google AdSense — will place adverts in the reserved positions. Such providers may set cookies and use device identifiers to select adverts and measure whether they were seen.
That storage is not functional, so it will only happen after you agree to it. If you decline, adverts may still appear but will be non-personalised, using no stored identifier. Your choice is recorded and can be changed at any time through the link in the footer.
Advertising will never be placed inside a tool panel, and will always be visually distinct from the tools themselves.
Affiliate links
Some pages carry recommendations for paid products. Following one takes you to another company’s website, and that company will typically set a cookie of its own so it can credit this site if you buy something.
That cookie is set by them, on their site, under their privacy policy — not by us and not on this site. We do not receive your name, your email, your payment details or what you bought. What comes back is an anonymous count of referrals and any commission earned.
Every such link is marked, carries rel="sponsored nofollow", and opens in a new tab. The affiliate disclosure explains the arrangement in full.
Third parties in the page
- Fonts
- None. The three typefaces this site uses are served from this site’s own domain, so your browser never contacts a font host. That is worth stating plainly because the alternative — Google Fonts — sends every visitor’s IP address and browser details to Google before any consent is asked for, which is why several European regulators have found its use unlawful without a legal basis.
- Open-source libraries
- PDF Studio needs two of them. They are served from this site’s own domain, so no third-party request is made. If they were ever switched to a public CDN, your browser would request the files from that CDN and reveal your IP address to it — so they are not.
- Hosting provider
- The web server that serves these pages keeps standard request logs as described above.
The Image Studio uses no libraries at all, so it makes no third-party request of any kind.
Children
This site is a set of utilities intended for a general audience and is not directed at children. We do not knowingly collect personal information from anyone, of any age, because we do not collect personal information at all — there is no account, no profile and no form that asks who you are.
If you believe a child has somehow provided personal information to us, write to grab@shopdigisoftware.com and it will be deleted.
Your rights
Because we hold almost nothing, most requests have a short answer — but the rights are real and you are entitled to exercise them. Write to the address above and you will get a substantive reply within one month.
- United Kingdom and the EU (UK GDPR and GDPR)
- You have the right to be informed, to access what is held, to have it corrected or erased, to restrict or object to processing, and to data portability. You may also complain to the Information Commissioner’s Office in the UK, or to your national supervisory authority in the EU. Our lawful basis for the functional storage described above is legitimate interest in providing a working site; for anything requiring consent, the basis is your consent, which you may withdraw at any time.
- California (CCPA and CPRA)
- You have the right to know what personal information is collected, to have it deleted, to correct it, to opt out of sale or sharing, and to non-discrimination for exercising these rights. We do not sell or share personal information as those terms are defined by the CPRA, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. If advertising is switched on in future, an explicit "Do Not Sell or Share My Personal Information" control will be added to the footer.
- Canada (PIPEDA)
- You have the right to access the personal information held about you and to challenge its accuracy and completeness. You may also complain to the Office of the Privacy Commissioner of Canada. Consent is obtained for anything beyond what is necessary to deliver the site.
- Australia (Privacy Act 1988 and the Australian Privacy Principles)
- You have the right to access and correct personal information, and to complain about a breach of the Australian Privacy Principles — first to us, and then to the Office of the Australian Information Commissioner if you are not satisfied. We do not disclose personal information to overseas recipients, because we do not hold any to disclose.
Retention and security
Server logs are kept for as long as the hosting provider’s default retention allows and are not archived separately. Storage on your device lasts until you clear it, or until the periods in the table above expire.
The site is served over HTTPS. Because your files never reach a server, the largest category of risk that applies to comparable sites — a breach exposing stored documents — does not apply here at all. That is a structural property of the design rather than a security measure we maintain.
Changes to this policy
The date at the top of this page is the last time it changed. Where a change is material — particularly switching on analytics or advertising — you will be asked again about storage rather than being opted in by a policy update you did not read.