Privacy policy

Effective 4 October 2026

pdfsimpleedit.com is a PDF editor in the browser. This page says what happens to the file, the account, and the payment.

Personal data controller

Damian Nagrabecki Damndev

Sole trader registered in Poland

ul. Za Ogrodem 27, 31-990 Kraków, Polska

Polish tax ID (NIP): 6751710194

Business register number (REGON): 383970167

PDF files

In the editor the file stays in a server session for 60 minutes and is then deleted. It is not kept as an archive.

The page-arrange mode leaves the PDF in this browser tab. That file is not uploaded.

An account library keeps a PDF until you delete it. A share link keeps a copy until the link expires.

Account

An account is optional. We store an email and a password hash (scrypt), or a Google identifier if you sign in with Google. Passwords are not stored in clear text.

Payments

Stripe handles payments (card, BLIK, Przelewy24). We do not store the full card number. We keep the Stripe customer id, the plan, and the fact that the payment arrived.

Other parties

Google : only if you choose Google sign-in. Dropbox : only if you save a file to your own Dropbox. SMTP mail : when you ask for a password reset. Hosting : the server that runs the app.

Stripe and Google may process data outside the EEA under their own standard contractual clauses.

Cookies and abuse limits

A language cookie and the account session (pdfsimpleedit_session, HttpOnly). There are no advertising trackers.

When you create a share link we store a hash of the IP address to limit how many links can be made. We do not build a profile from it.

Why and for how long

The data exists to perform the edit, account, or payment you asked for.

Editor session: 60 minutes. Share link: until it expires. Account and library: until you delete them. Payment record: for as long as billing and tax duties require.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing. Write to the controller.

You can complain to the Polish data protection authority, Prezes UODO, ul. Stawki 2, 00-193 Warsaw.

Usage statistics

If enabled by the operator, statistics record the event type (such as opening a tool or a successful export), the public page path without parameters, a source category and a device category. These statistics do not store document names or contents, IP addresses, full referrer URLs or user identifiers. They use no cookies and are removed after 90 days on the next write. We respect Do Not Track. Browser payment confirmations measure usage and are not an accounting sales report.