Privacy

Who runs this

UnsealPDF runs on Cloudflare's network (our hosting provider) and takes payments through Stripe. Nothing else receives your file, your password or your data. Questions: hello@unsealpdf.com.

What is uploaded, and when

The moment you add a PDF, it is uploaded to UnsealPDF so we can read its lock type. There is no local-only mode today. Nothing is uploaded before you add a file.

Your password

The password is sent over an encrypted connection and used once, in memory, by the unlocking software, which runs in a sandbox with no network access and no disk. It is held in memory only until your file has been processed (up to 10 minutes if you need to confirm a signature warning). It is never written to our database, logs or analytics, and never sent to any other service. We cannot promise that memory is wiped at an exact instant.

Your files

Files are deleted automatically about 60 minutes after your results are ready or after a terminal failure, and always within 24 hours of upload. You can delete them at any time from the results page.

While stored, your files and their names are encrypted with a key derived from the private link token held in your browser tab. We do not store that token or the key; the key exists in memory only while you are using the page. Our hosting provider keeps recovery copies of our database for up to 30 days. Those copies contain only encrypted file data, and once your job is erased nothing remains that can decrypt it, including for us.

No AI, no training

No AI model processes your document, and we do not use uploads to train anything. Unlocking is done by deterministic open-source software.

What we keep

After erasure we keep minimal records with no document content: a job ID, timestamps, status, price, payment and refund status, and error codes. IP addresses are stored only as a keyed hash for abuse limits. Payment records are kept for up to 24 months for accounting and fraud prevention, then deleted.

Payments

You pay on a page hosted by Stripe. Card details go directly to Stripe and we never see them. We send Stripe only an opaque order reference, never your file name or contents. Stripe's own privacy policy applies to the payment.

Cookies and tracking

No tracking cookies. No third-party scripts, fonts or analytics. We count anonymous steps (visit, upload checked, checkout started, paid, delivered, refunded) with no file content and no identity. Your browser's session storage holds a private link token for your job so you can come back from checkout; it is cleared when you close the tab.

Regulated documents

UnsealPDF is not designed for regulated workflows (for example HIPAA) and makes no such claim.