Privacy policy

This policy describes what happens to data when you use BunkerPDF. It is short, because the site is built so that there is very little to describe.

Your documents

Files you open with these tools are never uploaded, transmitted or stored. Every tool runs inside your own browser. When you choose a file, your browser gives this page access to it on your own device; the page reads it into memory, processes it there, and hands you back a result. At no point does the document travel over the network.

This is not a promise about our internal practices that you have to take on trust — it is a property of how the site is built, and you can verify it. Open your browser’s developer tools, switch to the Network tab, and use any tool on the site. You will see the page and its code load, and nothing carrying your document. Stronger still: load a tool page, disconnect from the internet entirely, and the tool will still work.

A direct consequence is that we cannot recover a file for you, cannot see what you processed, and cannot hand your documents to anyone else, because we never had them.

Passwords

The Protect and Unlock tools ask for a password. That password is used in your browser to encrypt or decrypt the document, and is discarded when you close or reload the page. It is never sent anywhere and never stored. If you forget a password you set, the file cannot be recovered by us or by anyone else.

What is stored on your device

BunkerPDF uses your browser’s local storage for exactly one thing: remembering whether you chose the light or dark theme. It never leaves your browser, and clearing your site data removes it.

We do not use cookies for tracking, advertising profiles or analytics of our own.

The one request you will see

This page invites you to watch the Network tab, so it should tell you what you will find there. Alongside the page and its code, you will see a single request to /cdn-cgi/rum. That is Cloudflare Web Analytics, which our host adds at the edge. It reports how quickly the page loaded and which page it was — nothing else. It sets no cookie, it does not follow you to other sites, and it has no access to the file you are working on, which never leaves the tab.

We mention it because an unexplained request would be a fair reason to doubt everything else on this page. If you see anything carrying your document, that would be a bug, and we would want to know.

Server logs

The site is served as static files by a content delivery network. Like any web server, it records standard request information — IP address, the page requested, timestamp, browser user agent — for security and abuse prevention. These logs concern page requests only; your documents are not part of any request, so they cannot appear in them.

Advertising

This site currently shows no advertising and loads no advertising code.

Third parties

Beyond the CDN that serves the site,BunkerPDF sends no data to third parties. The document-processing libraries it uses — pdf-lib, pdf.js and qpdf — are open source and run entirely on your machine.

Children

This site is a general-purpose utility and is not directed at children under 13. It does not knowingly collect personal information from anyone.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be noted here rather than made quietly.