Privacy Policy

1. How your files are processed

Browser-local PDF tools (merge, split, rotate, convert, watermark, protect, unlock, and delete pages) process your files entirely within your browser using WebAssembly. Your files are not uploaded to our servers for those operations.

PDF compression may use secure temporary server-side optimization when configured so we can produce smaller files without damaging quality. Compression files are used only to generate the result and are not retained.

2. Information we collect

Account information

If you create an account, we collect your email address and a hashed password via Supabase Auth. We may also store your account preferences and usage tier. This information is used solely to provide your account and to contact you about service-related matters.

Usage data

We collect anonymised usage counts (for example, how many times a tool is invoked per day) to understand which features are most useful and to enforce free-tier limits. This data is never linked to your file contents.

Log data

Our hosting infrastructure automatically records standard web server logs including IP address, browser user-agent, and the pages you visit. These logs are retained for up to 30 days for security and debugging purposes.

3. Analytics and usage tracking

We collect anonymous usage analytics to understand how our tools are used and to improve your experience. All analytics data is:

• Completely anonymous — no personal information, email addresses, or account data is collected or linked to usage patterns
• Privacy-compliant — IP addresses are anonymized, and no advertising or personalization tracking is enabled
• Optional — you can opt out at any time through our consent banner or by declining analytics when prompted

What we track

We use Google Analytics 4 to collect data about:

• Which PDF tools are used and how often
• Page views and navigation patterns
• General geographic regions (country/region level only)
• Browser type and device information
• Performance metrics to optimize loading speed

Data retention and your rights

Analytics data is automatically deleted after 26 months. Under GDPR, you have the right to:

• Opt out of analytics collection entirely
• Request deletion of any data associated with your usage
• Access information about what data has been collected

To exercise these rights or learn more, visit our privacy protection page or contact us at privacy@docmint.io.

4. Cookies

Docmint uses a minimal number of cookies:

• Authentication cookies — set by Supabase Auth to keep you signed in. These are strictly necessary and cannot be disabled while you are logged in.
• Analytics cookies — Google Analytics uses cookies to track anonymous usage patterns. These are only set if you consent to analytics tracking and can be disabled at any time.
• Preference cookies — used to remember lightweight UI preferences (for example, your last selected output quality). These do not contain personal data.

We do not use advertising cookies or third-party tracking cookies beyond Google Analytics (which you can opt out of).

5. Third-party services

We use a small number of trusted third-party services:

• Supabase — for account authentication and database storage. Supabase processes your email address and account metadata in accordance with their privacy policy.
• Payment processor — if you purchase a paid plan, payment details are handled directly by our payment provider and are never stored on our servers.

6. Data retention

Account data is retained for as long as your account is active. You can delete your account at any time from your account settings, which will permanently remove your email address and associated data from our systems within 30 days.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, contact us at privacy@docmint.io.

8. Children's privacy

Docmint is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the “last updated” date at the top of this page. Continued use of Docmint after changes are posted constitutes your acceptance of the updated policy.