Privacy Policy
The short version
Your files never leave your device. Every tool runs in your browser, so we never receive, see or store the documents you work on, the text in them or the passwords you set to protect them. We collect very little else: anonymous usage events to improve the tools, the details Lemon Squeezy shares with us when you buy a license, and the messages you send us. We do not sell data, show ads or track you across other websites.
1. Who we are
StayPutPDF ("we", "us") is based in Almaty, Kazakhstan. This policy explains what information is handled when you use the StayPutPDF website, web app and installed app (the "Service"), and is part of our Terms of Use. Questions: support@stayputpdf.com.
2. Your files
Files you open in StayPutPDF are read and processed by your own browser, on your own device. They are not uploaded to us or to anyone else, and we have no way to see, copy, recover or delete them. The same applies to what you create: merged, split, redacted, signed or converted files are built on your device and downloaded straight to it. Nothing drawn from your documents — names, text, images or file names — is ever sent to us.
3. Information stored on your device
To work without accounts, the Service keeps a few things in your browser for this site (local storage, a first-party cookie and IndexedDB):
- Free plan page count — how many pages you used today, kept in three places so that clearing one does not silently reset it;
- Browser hash — a one-way hash of a few browser properties (user agent, language, colour depth, screen size, time zone and number of CPU cores), used to tell this browser apart from another one on the same computer. It is not canvas fingerprinting and is not used to recognise you on other websites;
- Your license key and its status, if you bought Premium;
- Your saved signature and your details for one-click form filling (such as name, address, email, phone, company or date of birth), only if you choose to save them;
- The app's own files, cached so the tools work offline, and small settings such as whether you closed the "install the app" bar, and the list of up to three tools you used recently (shown under "Recent" in the sidebar; "Clear" removes it).
This information stays on your device. The only exceptions are your license key and a short device label, which are sent to Lemon Squeezy to check your license (section 5). You can delete saved items in the app (for example "Delete" in the Sign tool) or remove everything by clearing this site's data in your browser. Clearing it resets the free page count and means re-entering your license key. Anyone who can use your device or browser profile may be able to see this information, so protect your device accordingly.
4. Usage analytics
We use PostHog, hosted in the European Union, to understand which tools are used and where people get stuck. We run it in a limited setup:
- No analytics cookies or storage — PostHog keeps its data in memory only and nothing of it remains after you close the tab;
- No session recording and no automatic capture of clicks or typing;
- Only events we chose by hand: pages viewed, which tool was opened, that an action started or finished, that the free limit was reached, and clicks on upgrade, checkout or install buttons. Some events carry simple counts or settings — for example the number of pages, signature fields or form fields, how much a file was compressed (as a percentage), the split mode, OCR languages or the plan you chose;
- Never anything from your documents — no file names, file contents, text you type or details you save.
Like any web service, PostHog receives your IP address and basic browser information with each request and may use them to estimate an approximate location (country or city). We use analytics on the basis of our legitimate interest in keeping the tools working and improving them. If you block analytics with a browser setting or extension, every tool still works the same way.
5. Purchases and licenses
Payments are handled by Lemon Squeezy, our reseller and Merchant of Record. Lemon Squeezy collects your payment details, name, email, billing address and country, and processes them under its own privacy policy. We never see or store your full card details.
From Lemon Squeezy we receive what we need to provide your license and support: your name, email, country, what you bought and when, your license key and its activations, and the version and time of the Terms you agreed to at checkout.
When you activate, check or remove Premium on a device, the app sends your license key and a short device label (a code derived from the browser hash in section 3, such as "stayputpdf-web-1a2b3c…") to Lemon Squeezy. A paid license is re-checked at most once a day. The label lets you see and manage how many devices use your license; it contains nothing about you or your files.
6. Messages you send us
If you use the contact form, your name, email and message are delivered to our inbox through Web3Forms. If you email us, we receive your email address and whatever you write. We use this only to reply and to keep a record of support requests. Please do not send us confidential documents — we do not need them to help you.
7. Hosting and content networks
When your browser loads the Service, it requests files from our hosting provider and from content networks. Like any website, these providers receive your IP address, browser type and the address of the file requested, and may keep it in short-term server logs. They never receive your documents. They are:
- Vercel — hosting of the website;
- jsDelivr and cdn.sheetjs.com — open-source libraries the site and tools use;
- tessdata.projectnaptha.com — language data for text recognition (OCR), downloaded the first time you use a language;
- Lemon Squeezy and PostHog — the checkout window and analytics script.
Each provider handles this information under its own privacy policy. We are not responsible for their practices.
8. What we don't do
- We do not sell or rent personal information, and we do not share it for advertising.
- We do not use advertising cookies, third-party trackers or cross-site tracking.
- We do not build profiles of you, and we never use your documents for anything — including training AI — because we never have them.
9. Legal bases and your rights
We handle personal information to provide the Service and your license (contract), to keep the Service secure and working and to improve it (legitimate interests), to answer your messages, and to meet legal obligations such as tax and accounting rules (handled mainly by Lemon Squeezy).
Depending on where you live, you may have the right to access, correct or delete your personal information, to restrict or object to its use, to receive a copy of it, and to complain to your data protection authority. To use these rights, email support@stayputpdf.com from the address you used with us. Information stored only on your device (section 3) is not available to us — you can view and delete it yourself in your browser.
10. How long we keep information
We keep personal information only as long as we need it for the purposes above: purchase and license records for as long as your license is active and afterwards as long as tax, accounting or other laws require; support messages for as long as needed to help you and keep a reasonable record; analytics events for a limited period under PostHog's retention settings.
11. International transfers
We are based in Kazakhstan, and the services we use operate in the European Union, the United States and other countries. Your information may therefore be processed outside your country. We choose providers that protect personal information under recognised safeguards.
12. Children
The Service is not directed at children under 16, and licenses may only be bought by adults (see our Terms). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
13. Security and its limits
Keeping files on your device removes the risk of them being exposed on someone else's server, but it does not protect against threats on your own device. Malware, keyloggers or browser extensions with broad permissions may be able to access your files; your browser may keep temporary copies; and your internet provider can see that you visit stayputpdf.com, though not your files. No website or transmission over the internet is completely secure. For highly sensitive documents, consider asking a security professional about your setup.
14. Changes to this policy
We may update this policy. The new version will be posted here with a new date, and we will point out important changes on the site. Continuing to use the Service after a change means you accept the updated policy.
15. Contact
Privacy questions or requests: support@stayputpdf.com
Last updated: October 2026