Privacy at PaperZero
PaperZero is built privacy-first by architecture, not by policy. For every standard tool, your document is opened, processed and rendered entirely inside your own browser tab. There is no upload step to trust, because there is no server receiving your files.
Our principles
- Local first. If an operation can run on your device, it runs on your device.
- No accounts for core tools. Every tool on this site works anonymously.
- No watermarks. We do not degrade free output to push upgrades.
- Minimal analytics. We only record anonymous usage counters like tool name and duration bucket - never file names, file contents, or extracted text.
- Honesty about exceptions. When a future feature genuinely needs network access (for example cloud AI), we will say exactly what leaves your device before it does.
Data flow matrix
| Tool | File uploaded? | Content sent to third party? | Internet required? |
|---|---|---|---|
| Merge / Split / Organize / Rotate | No | No | No (after first load) |
| Images to PDF | No | No | No (after first load) |
| PDF to JPG / PNG / ZIP | No | No | No (after first load) |
| Watermark / Page numbers | No | No | No (after first load) |
| Extract text | No | No | No (after first load) |
| Remove metadata | No | No | No (after first load) |
| PDF fingerprint (hash) | No | No | No (after first load) |
What stays in your browser
Optional convenience data (like a recent-activity list) is stored only in your browser using IndexedDB and localStorage. It never syncs anywhere, and you can clear it at any time from your browser settings. Clearing site data removes everything instantly.
Security measures
- A strict Content Security Policy restricts scripts to this origin.
- Documents are processed inside Web Workers with strict input validation.
- Embedded PDF JavaScript is never executed.
- All processing assets are self-hosted; no third-party scripts run on tool pages.
This page describes the current PaperZero release. Features under active development may update these guarantees, and any change will be documented here before launch.