Privacy & Security Policy
Last updated: June 9, 2026. Learn how we enforce client-side confidentiality.
Document Content Privacy
WayPDF does not upload or transmit your document files. All conversion, merging, splitting, OCR, and compression algorithms execute locally in your browser sandbox memory. We have zero knowledge of the contents of your documents.
Zero Data Storage
We do not own, maintain, or rent servers that store document files. When you close the browser tab, all document buffers are automatically cleared from your browser RAM context, leaving no residual traces.
GDPR & Corporate NDA Compliance
Because files never cross the network boundary, WayPDF aligns with strict compliance frameworks, including GDPR, HIPAA, and corporate NDAs. Your documents remain in your custody at all times.
Detailed Privacy Policy
Information We Collect
WayPDF is designed as a zero-data platform. We do not collect, store, or process any document content, filenames, or metadata from your files. All PDF operations — including reading, writing, converting, and encrypting — execute entirely within your browser session. The only data we collect is anonymous page view analytics through Plausible, a privacy-focused analytics service that does not use cookies or track personal information.
How We Process Your Files
When you use a WayPDF tool, your file is loaded into your browser memory using JavaScript FileReader and ArrayBuffer APIs. All subsequent processing — merging, splitting, compressing, OCR, encryption, and metadata editing — is performed by WebAssembly modules (compiled from C/C++ libraries like pdf-lib, pdf.js, and Tesseract.js) executing on your device's CPU. The processed result is offered as a browser download. When you close the tab, all temporary data is automatically garbage-collected by the browser.
Third-Party Services
WayPDF uses Plausible Analytics for aggregated, anonymous traffic measurement. Plausible does not use cookies, does not collect personal data, and is GDPR, ePrivacy, and CCPA compliant. No document content, filenames, page counts, or any derivative data from document processing is transmitted to Plausible or any other third-party service.
Data Retention and Deletion
Since WayPDF does not store files on any server, there is no data retention period. All document processing is ephemeral — data exists only in your browser's memory for the duration of the processing session and is automatically cleared when you navigate away, refresh, or close the tab. No residual copies are retained on our infrastructure.
Security Measures
All communications with our analytics service are encrypted via HTTPS. The website itself is served over HTTPS with HSTS preloading. For document encryption, WayPDF uses the Web Crypto API for AES-256-GCM encryption with PBKDF2 key derivation — the same cryptographic standards used by modern browsers for secure communications. Your encryption password never leaves your device.
Frequently Asked Compliance Questions
Are files cached temporarily on your servers?
No. We do not have servers to upload files to. All file buffers load into local browser memory allocations and compile locally.
Do you run analytics tracking on document parameters?
We use privacy-friendly web analytics (Plausible) to track page visits and feature launches. However, we do not track document filenames, text contents, sizes, page counts, or password credentials.
Is WayPDF compliant with GDPR and HIPAA?
Yes. Since no document data is ever uploaded or processed on external servers, WayPDF is inherently compliant with GDPR requirements for data minimization and processing limitation. For HIPAA, because protected health information never leaves your device, WayPDF can be used in healthcare contexts where cloud-based PDF tools would require a Business Associate Agreement (BAA).
Do you use cookies?
We do not use any tracking cookies, advertising cookies, or third-party cookies. Plausible Analytics runs without cookies entirely, relying on privacy-preserving measurement techniques. No cookie consent banner is needed because no cookies are set by our site.