Privacy Policy

This page explains, plainly, what happens to your files and data when you use Desktora. In short: most tools run inside your browser, and we never sell your data.

Last updated: 2026-09-30

1. Your files

The vast majority of tools (merge, split, compress, rotate, protect and unlock PDF, image conversion, background removal, OCR, the CV, invoice and QR builders, and more) run entirely inside your browser using JavaScript and WebAssembly. The file is never uploaded to our servers — we do not see it and cannot see it.

Exceptions that do use our server:

  • HEIC to JPG: the file is sent to our server, processed in memory only, returned to you, and then discarded immediately. It is never written to disk, backed up or logged. (Word, Excel and text to PDF run entirely in your browser.)
  • Uploads are capped at 50 MB; larger files are rejected without processing.

2. Third-party services some tools rely on

A few tools call external services to do their job. In those cases the provider sees your IP address and whatever the tool sends it:

  • URL Shortener: the long URL is forwarded to TinyURL, is.gd or CleanURI to create the short link. We do not store your links; the history shown in the tool lives only in your browser.
  • Remove Background: the AI model (about 25 MB) is downloaded once from Hugging Face and cached by your browser. Your image itself is never sent anywhere.
  • OCR and the PDF viewer: language data and rendering components are fetched from public CDNs (such as jsDelivr, unpkg and cdnjs). The contents of your files are not sent to them.

3. Data stored in your browser

For convenience, some tools keep data in your browser’s local storage, on your device only, and never send it to us: your language preference, drafts in the CV, cover letter, invoice and vCard builders, a saved signature, and your URL shortener history. You can delete all of it at any time from your browser settings (clear site data).

4. Bio Link pages

A Bio Link page you create is not stored on our servers; its content is encoded inside the link itself. Anyone who has the link can see what you put in it, so do not include information you would not want public.

5. Contact form

When you use the contact form we receive your message, the topic you chose, your name and e-mail if you entered them, and the page you came from. We use this only to read and reply to your message, keep it for no longer than 12 months and then delete it. It is not used for marketing and is not shared with anyone other than the e-mail delivery provider that carries it to us. To limit abuse we cap the number of messages from the same connection.

6. Analytics

We count page visits with Cloudflare Web Analytics, which uses no cookies and does not identify you.

We also keep our own anonymous tool counters: when a tool page opens, and when you finish a job in it (download or copy a result), your browser sends us the tool’s name, the site language and the previous tool you finished in the same tab. If something goes wrong on a page, it also sends a short technical description of the error, with file names, web addresses, numbers and quoted text taken out, so we can fix it. We store only a daily total per tool and per error — never your IP address, your files, their names or contents, or anything that identifies you — and nothing is saved on your device for this. We use these numbers to learn which tools are useful and which are used together, and the site may show rounded totals from them, such as “used 1,200+ times”.

We may use Google Analytics 4 to understand which pages are used most and where visitors come from. It collects data such as the pages you visit, device and browser type and approximate country, and uses cookies. We never send it your file names or contents. You can block it with the Google Analytics Opt-out add-on or any tracker blocker.

7. Advertising

The site is supported by Google AdSense. Google and its advertising partners use cookies and advertising identifiers to show ads based on your previous visits to this and other websites (personalised ads); in some regions, or when you decline personalisation, non-personalised ads are shown instead. We do not control these cookies and do not see the data Google collects.

If you are in the EU, UK or Switzerland you will be asked for consent before advertising cookies are set, and you can change your choice later.

8. Server logs

Like every website, our hosting provider records basic HTTP request logs (IP address, browser type, page requested, time) for security and troubleshooting. These are kept briefly (typically days) and then deleted automatically. They never contain the contents of your files.

9. Children

The site is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has sent us personal data, tell us via the contact form and we will delete it.

10. Your rights

Depending on where you live (for example under the EU GDPR or California CCPA) you may have the right to access, correct or delete your personal data, or object to its processing. Since we hold no accounts and none of your files, the only data we might have about you is what you sent through the contact form. To exercise any right, use the contact form.

11. Changes to this policy

We may update this policy when we add tools or services. We will change the "Last updated" date at the top of the page and, for material changes, add a notice on the site.

12. Questions

For any privacy question, use the contact form and choose the topic "Privacy or data question".