Effective 3 September 2026

Privacy policy

Bindery is designed so your PDF files stay on your device. PDF processing happens in your browser; we do not upload, inspect, or store the documents you process.

Account data

If you create an account, Supabase processes your email address, encrypted authentication credentials, and account identifier so you can sign in. We store subscription status linked to that identifier.

Daily allowance

Anonymous usage is counted in your browser using IndexedDB. If you are signed in, Supabase stores only your account identifier, UTC date, and completed-job count so the allowance follows you across devices. We do not record filenames, tool names, file sizes, page counts, or document contents for metering.

Payments

Stripe processes payment details, billing information, and subscription or one-time purchase events. Bindery never receives your full card number. Stripe’s own privacy policy applies to its processing.

Operational data

Cloudflare delivers and protects the site and provides cookieless Web Analytics. It may process standard request data such as IP address, user agent, timestamps, and security signals. We do not sell personal information.

Sealed packages

Handoff links, signature requests, team review and form links store documents only as ciphertext encrypted in a browser before upload, together with sizes, SHA-256 hashes and timestamps. Bindery holds no key that can open them. Packages expire on the schedule shown when they are created and are swept afterwards. Form responses are encrypted to the form owner’s public key; the private key stays in the owner’s browser and backup file.

Referrals and licenses

Signed-in users may generate a referral code. When a referred purchase completes, Bindery records which code was used and credits the referrer’s Stripe balance. Server licenses are signed tokens tied to a subscription; the server that uses one verifies it offline and sends nothing to Bindery.

Usage counts

The app counts a few product events — a tool opened, a job finished, a paywall shown, a checkout started or completed — and sends them to binderypdf.com as daily totals: an event name, a tool name and a number. The request carries no identifier, cookie, file name, size, page count or content, and the endpoint keeps one row per day. The counts are off automatically when your browser sends Global Privacy Control or Do Not Track, and you can switch them off for your browser with the “Usage counts” control in the footer. The security page lists every service the app talks to.

Your choices

You can use every PDF tool without an account, subject to the published daily allowance. You may cancel a recurring Pro plan from the Stripe customer portal. To request account deletion or a copy of account data, contact [email protected].

Changes

We may update this policy as the service changes. The effective date above will be updated when material changes are published.