Privacy Policy · Where your files actually go

This page explains, tool by tool, where the processing happens, what is left on the server, and what is recorded when you visit. The site is operated by LIANG WEIJIA, an independent developer based in Shanghai, China. Customer support: sssy3384@163.com.

In detail

Files that never leave your browser

Merge, split, compress, organise pages, PDF to image and image to PDF run entirely inside your browser. Those files are never transmitted to our server, and we have no technical way to see them.

Files that do reach our server

PDF to Word, Word to PDF, encrypt and decrypt need a conversion engine that cannot run in a browser. For those four tools the file is uploaded over HTTPS, converted, and deleted as soon as the response has been sent. No copy is kept, no backup of your file is written, and nobody reviews its contents.

What we record when you visit

A first-party counter stores the page path, the referring page, your user-agent, a coarse device class (desktop or mobile), a timestamp, and a visitor identifier. That identifier is the first 16 characters of a SHA-256 hash of your IP address, user-agent, the current date and a fixed salt — it cannot be reversed into an IP address.

What we deliberately do not do

We do not store IP addresses: the raw IP exists only in memory, for at most one minute, to rate-limit the counter. We set no cookies, run no third-party analytics, no advertising networks and no tracking pixels. There is no account, no login and no newsletter.

Enquiries and quotes

If you submit the form on the Enterprise page or email us, we keep what you choose to send — organisation, name, contact details, industry, team size and your requirement — only to answer you. We do not sell it and do not pass it to anyone outside the people who need to reply.

Payments

Card payments are processed by Creem (creem.io) as merchant of record. We never receive or store card numbers; the payment step is covered by Creem's own privacy policy. We receive only the order details needed to deliver what you bought: plan, amount, and the contact address given at checkout.

Retention and your rights

Web server access logs are short-lived and used for security and troubleshooting. Enquiry records are kept until the conversation closes or until you ask us to delete them. Email us and we will tell you what we hold, correct it, or delete it, within 30 days. That covers GDPR rights for EU and UK visitors and the rights granted by China's Personal Information Protection Law.

Who operates this site

PDF Toolbox (pdf.iceai.cloud) is operated by LIANG WEIJIA, an independent developer based in Shanghai, China. Customer support and all privacy requests go to sssy3384@163.com, answered within one business day. The site is not directed at children under 16.

Related tools