Privacy Policy

1. Who we are

PDFfont (pdffont.com) is operated by Omaze PDFfont, the legal business entity trading as PDFfont. For the purposes of the UK/EU General Data Protection Regulation, Omaze PDFfont is the data controller for the personal data described below. Contact us at any time through the Contact Us page.

2. Your documents

PDF editing runs inside your own browser. Your file is uploaded to our servers only when you ask us to save it, unlock it with a payment, or store it in your account. We do not read, mine, sell or train any model on your documents. Stored documents are encrypted at rest and are accessible only to you through your account or your private document link.

3. Data we collect

• Account data — email address and sign-in identifiers (including Google sign-in) so you can log in.
• Payment data — handled by Paddle, our Merchant of Record. We receive the payment status, amount, plan and a payment reference. We never receive your full card number.
• Documents you choose to save — the file, its name and page count.
• Support messages — the name, email and message you send through the Contact page.
• Basic usage data — page visits, referral source and technical logs needed to run and secure the site.

4. Why we use it and our legal bases

• To provide the editor, accounts and paid document links — performance of a contract.
• To take payments and prevent fraud — contract and legitimate interests.
• To answer support tickets — contract and legitimate interests.
• To keep the service secure and measure basic traffic — legitimate interests.
• To send optional marketing — only with your consent, withdrawable at any time.

5. Sharing and processors

We share data only with the providers needed to run the service: Paddle (payments, subscription management, tax and invoicing, as Merchant of Record), our cloud hosting and database provider (accounts, stored documents, support tickets) and Google Search Console/analytics for aggregate traffic. These providers act under contract on our instructions. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

6. International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

7. How long we keep data

• Temporary editing data: not stored — it disappears when you close the tab.
• Documents saved to an account or a paid link: kept until you delete them or ask us to.
• Payment records: kept for up to 7 years where tax law requires it.
• Support tickets: kept up to 24 months.

8. Your GDPR rights

If you are in the UK or EEA you can request access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. You may also withdraw consent at any time and complain to your local supervisory authority (in the UK, the ICO). Send requests through the Contact page; we respond within 30 days.

9. Your CCPA/CPRA rights

If you are a California resident you have the right to know what personal information we collect and why, the right to delete it, the right to correct it, and the right to non-discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the CPRA, so no "Do Not Sell or Share My Personal Information" opt-out is required. Submit requests through the Contact page; we verify requests using the email address on your account.

10. Cookies

We use only essential cookies and local browser storage: to keep you signed in, to remember a document you were editing before signing in, and to secure admin access. We do not use advertising cookies.

11. Children

PDFfont is not directed at children under 16 and we do not knowingly collect their data.

12. Changes and contact

Material changes to this policy will be posted here with a new date. For any privacy question or request, use the Contact Us page and select the "Privacy / data request" topic.