Privacy Policy

Last updated: April 11, 2026

How It Works

PaperFit is a client-side web application. Processing for PDFs, images, and supported privacy-scanner file types happens entirely in your browser using JavaScript libraries such as pdf-lib, pdf.js, and related local parsing utilities.

Your files are read into browser memory, processed locally for preview or export, and then discarded when you close the tab. At no point is file content uploaded by the application for processing.

Pro Features — Client-Side Processing

All PaperFit Pro features — including batch processing, OCR, permanent redaction, tool chains, and saved presets — run entirely in your browser. Files are never uploaded to PaperFit servers.

OCR is powered by Tesseract.js. The language model is downloaded once from a CDN and cached in your browser for subsequent use. No document content, text, or images are sent to any server during OCR processing.

Cloud Import

When you opt into Cloud Import, PaperFit redirects you to the cloud provider's OAuth consent screen (Google Drive, Dropbox, or Microsoft OneDrive). You grant read-only access to select a file.

The selected file is downloaded directly from the cloud provider into your browser — it does not pass through PaperFit servers. The OAuth token is ephemeral, lives only for the duration of the picker session, and is never stored by PaperFit.

What We Don't Collect

• Files: Your PDFs are never uploaded, transmitted, or stored on any server.
• Personal data: PaperFit itself does not collect names, IP addresses, or personally identifiable information. If you subscribe to Pro, Stripe stores the email you provide at checkout (see Payments below). If you join the waitlist, your email is sent to WaitlistWiz (see WaitlistWiz below).
• File names or content: Analytics (if enabled) never receive information about what files you process.

Optional Anonymous Analytics

We use Google Analytics 4 (GA4) in cookieless mode to understand how people use the app. This helps us prioritize improvements and fix bugs.

What we track (if you consent):

• Page views and navigation patterns
• Button clicks and feature usage (e.g., "Download" or "Print")
• Technical errors and performance metrics
• General file statistics (e.g., page count, file size range) — never file names or content

Your choice: On your first visit, you'll see a consent banner. You can accept or decline analytics. Your choice is saved locally and is not reset unless you explicitly choose to clear your analytics consent in Preferences.

We also respect the "Do Not Track" browser setting and will not initialize analytics if it's enabled.

Managing Local Data

In Preferences → Privacy Controls, you can clear selected local data using a checklist. You can clear session data, tool drafts, and export history while keeping preferences and consent, or choose to remove those too.

Local Storage

We store minimal data in your browser's localStorage:

• Theme preference — whether you've chosen light or dark mode
• Analytics consent — your decision to allow or decline analytics
• Session data (temporary) — your current document settings so you can recover your work if the page refreshes

This data never leaves your browser and can be cleared at any time through browser settings or via the in-app checklist in Preferences.

Service Worker (PWA)

PaperFit includes a service worker that caches static assets (HTML, CSS, JS, fonts) so the app works offline after your first visit. The service worker does not intercept, store, or transmit any user files or data.

Payments

Payments for PaperFit Pro are processed by Stripe. PaperFit does not store credit card numbers or payment details. All payment data is handled directly by Stripe and is subject to Stripe's Privacy Policy.

The email address you provide at checkout is stored by Stripe to identify your customer account and enable cross-device Pro activation. PaperFit does not independently store this email.

WaitlistWiz

Waitlist signups are processed by WaitlistWiz (a third-party service). Email addresses submitted via the waitlist form are sent to waitlist-wiz.vercel.app. PaperFit does not independently store waitlist emails.

Sentry Error Tracking

Error reports are sent to Sentry to help us identify and fix bugs. File names are scrubbed before sending (replaced with [file]). No file content, no document text, and no user-identifiable information beyond browser and device type is included in error reports.

Third-Party Services

PaperFit uses the following third-party services. Each service's own privacy policy applies to data processed by that service:

• Google Analytics 4 (GA4) — optional anonymous analytics, configured in cookieless mode with no persistent user identifiers
• Stripe — payment processing for Pro subscriptions
• WaitlistWiz — waitlist management
• Sentry — error monitoring (file names scrubbed, no document content sent)
• Tesseract.js CDN — OCR language model delivery (no document data sent)

No advertising networks or data brokers are used.

Children's Privacy

Since we don't collect personal data, there are no special concerns regarding children's privacy. Anyone can use the tool safely.

Changes to This Policy

If this privacy policy changes, we will update this page with a new "last updated" date. Since we don't collect contact information, we cannot notify users directly — but the policy will always be accessible at this URL.

Contact

Questions about this privacy policy or PaperFit privacy behavior? Email support@paperfit.app.