What we know about you.

Your documents never reach us

PDF Protect Plus processes your files on your device. Password protection, merging, signing, watermarking, compression: all of it happens locally, in an engine built into the application. No PDF is ever uploaded, during processing or after it.

Our servers only handle accounts, subscriptions and authorised devices. They receive no documents and have no way to reach them.

Document passwords you save in the local vault are encrypted and stay on your device.

What we collect

This list is exhaustive.

Account

Name, email address, username, chosen language, your profession if you give it when the app first starts (to tailor our tips and emails; you can change or remove it in “My account”), and your password as an irreversible hash. We cannot read your password.

Devices

A device identifier, the platform, the device name and model, the system and application versions, and the activation and last-check dates. This is what enforces one active device per platform.

Device changes

The history of device replacements, used to enforce the one-active-device-per-platform rule.

Subscription

Your plan, its status, its period dates and its number of licences. Card details never pass through our servers: they are entered with Stripe.

Support

The subject, category and content of the messages you send us, plus your name and email address if you use the public help form.

Feedback

What you send from the « We’d love your feedback » page, signed in or not, or from “Give feedback” in the app: the type of feedback, the app and tool concerned, the app version, your message, your replies, an optional rating and the screenshots you choose to attach (PNG or JPEG images only, never PDFs). If you are not signed in, your first name and email are optional and only used to reply to you. A screenshot may show a document: do not attach confidential information. Our team reads this feedback to improve the app. If you tick the “testimonial” consent, your name, job title, company, LinkedIn profile, website and the photo or logo you send may be published with your feedback on our site, only after review by our team; the testimonial stays published until you withdraw your consent, from “My feedback” or through the help page.

Team

The team name, the roles of its members, and the email addresses of the people invited.

Trial

The start and end dates of your trial, the trial version offered to you and where your first visit came from (campaign parameters), a hashed fingerprint of your email address and the identifier of your first device, so that each person gets only one trial, plus the list of follow-up emails already sent (welcome, installation help, end-of-trial reminders).

Journey

To compare two ways of offering the trial, our server records the steps of your journey: first visit, sign-up, email verification, download click, first app sign-in, guided start begun or skipped, first successful operation in the app and first operation on one of your own files (without the file’s name or content), checkout opened, card added and payments (amount). These steps are linked to a random identifier taken from the ppp_variant cookie, then to your account if you create one. No IP address, no document content, no third-party tool. To count visits without a cookie and set bots aside, your browser reports that it displayed a page for at least two seconds: we keep the page, the site you came from (its domain only) and a fingerprint computed from your IP address, your browser and a random number that changes every day and is never kept. The IP address itself is not recorded, and the fingerprint cannot recognise you from one day to the next.

Perpetual license

If you click “Notify me” on the Pricing page: your email address, the site language and the date of your consent. It is only used to write to you if a perpetual license happens; contact us from the help page to have it erased.

Link for your computer

If you use “Send me the link” on a phone: your email address, the site language, the page you asked from, the date of your consent and the random identifier of your visit (to link a sign-up made later with the same address). We send you the download link, then a single reminder the next day if no account was created with that address. Every email has an unsubscribe link. The request is deleted automatically after 90 days.

What we do not collect

These absences can be verified in how the product behaves.

• No visitor IP address is recorded.
• No third-party analytics tool, ad tracker or pixel without your explicit consent.
• No profiling, no automated decisions, no sale of data.
• No document content, no file names, no file metadata.

Cookies

The site uses essential cookies to maintain your session and protect forms. Two technical cookies are added, regardless of your consent: ppp_variant (90 days) records which trial version you are offered and carries a random identifier for the journey measurement described above; ppp_partner (60 days) remembers a partner’s code if you arrive through their link. Optional measurement of site traffic and our ads (Google Analytics, Google Ads and the Meta pixel for Facebook and Instagram) is offered and loads only after you accept. Google Analytics then sets _ga cookies and receives visit information (pages viewed, referral source, campaign parameters) and conversion information (registration, sign-in, plan selection, checkout start, trial start). Google Ads and Meta receive visit, click identifier, registration and trial or subscription start information. Only with your permission, your browser’s Google Analytics identifier is also linked to your subscription so that our server can report your first payment to Google Analytics (amount, currency, plan and invoice number). None of this measurement receives your PDF contents, name, email address or password. Google advertising personalization is disabled and the Meta pixel’s automatic data collection is turned off. On account pages, only the generic page address is sent, without tokens or identifiers. You can refuse or withdraw permission through Ad privacy settings; measurement cookies are then deleted. Your choice lasts for your session; blocking cookies or scripts can prevent measurement. A registration is not a payment.

How we measure visits

Internal measurement, for every visitor. To learn which sources bring customers, our server records each browser’s journey: pages viewed, the source of the first and the latest arrival (utm campaign parameters, whether a Google click identifier was present, yes or no, the site you came from reduced to its domain, the landing page, and whether the page opened in the built-in browser of TikTok, Instagram or Facebook), clicks on Download, Microsoft Store or Google Play, pricing views, sign-up, trial start, first app launch, payment and refund. These steps are linked by a random identifier specific to our site, the ppp_mid cookie (13 months at most, never extended). No IP address, name or email is recorded in these steps, nothing is matched with other sites or passed to an advertising network, and they are deleted after 13 months. This audience measurement does not need your consent, but you can refuse it at any time.

Visit counting. To count visitors without cookies, our server also computes a daily fingerprint: a hash of the IP address, the browser and a random salt that changes every day and is kept two days at most. The IP address itself is not recorded, and a day’s fingerprint can no longer be recomputed afterwards.

Google and Meta, as you choose. Google Analytics, Google Ads and the Meta pixel load only after you click “Accept” in the banner; if you decline, nothing is sent to them. You can also change your mind about Google and Meta at any time with “Manage cookies” at the bottom of every page.

Who else sees this data

We rely on three providers to run the service. The measurement tools described in the cookies section (Google, Meta) load only with your permission.

• Stripe handles payments and holds your card details and invoices. We never see your card number.
• Our hosting provider runs the server and its database.
• Our mail service delivers verification, reset and support emails.

How long we keep it

Your data is kept for as long as your account exists. Deleting it erases them immediately.

One exception: Stripe keeps billing records after the account is deleted, as accounting law requires. We cannot erase those.

Feedback is kept for 24 months after its last exchange, and screenshots for 90 days after they are sent; they are then deleted automatically. You can ask us to delete them at any time from the help page, and deleting your account also erases them.

Your rights

• View and correct your details from your account area.
• Obtain a copy of your data by writing to us.
• Delete your account at any time, without contacting us.

Deleting your account

Deletion is permanent and requires no request to us.

• From the website: open your account area, section “Delete my account”.
• From the application: Account tab, at the bottom of the screen, “Delete my account”.

Your account, your devices, your support conversations and your subscription are erased. Any current subscription is cancelled immediately. Your documents are not affected: they stayed on your devices.

Writing to us

For any question about this policy or your data, use the support page.