Your privacy is not just a policy for us — it's the architecture of our product. Here's everything you need to know.
📅 Last Updated: January 1, 2025 — PDFLocker is built on a zero-data-collection principle. We process all PDF files client-side in your browser and never transmit your files or personal data to any server.
PDFLocker ("we," "our," or "us") operates the website at pdflocker.com (the "Service"). This Privacy Policy describes how we handle information in connection with your use of our Service.
The single most important thing to understand about PDFLocker is this: your PDF files are never uploaded to our servers. The PDF password protection tool processes your documents entirely within your web browser using client-side JavaScript. Your files, their contents, your passwords, and any document metadata never leave your device through our Service.
We designed PDFLocker this way deliberately, because we believe privacy-first architecture is more trustworthy than privacy policies alone. A privacy policy can be changed — but when encryption happens locally, no data transmission is technically possible.
To be absolutely transparent, here is what PDFLocker does not collect under any circumstances:
Like virtually all websites, our web server may log certain standard technical information when you visit our site. This is standard web infrastructure behavior and includes:
This information is used solely for operational purposes — monitoring server health, diagnosing technical issues, and improving service performance. It is not linked to any personal identity and is not sold to third parties.
PDFLocker uses minimal cookies strictly necessary for the operation of the website. We do not use tracking cookies, advertising cookies, or cross-site tracking technologies.
We may use browser local storage to save user preferences (such as UI settings) purely for your convenience. This data never leaves your browser and is not transmitted to us.
You can clear cookies and local storage at any time through your browser settings. Doing so will not affect the functionality of the PDF encryption tool.
If you choose to contact us via our Contact form, you may voluntarily provide your name, email address, and message content. This information is:
PDFLocker loads the open-source pdf-lib library from a third-party CDN (Cloudflare). When your browser requests this script file, Cloudflare's servers may log standard request metadata (IP address, timestamp). This is standard CDN behavior outside our control. We recommend reviewing Cloudflare's privacy policy if you have specific concerns. We use CDN-hosted libraries solely for performance optimization and transparency — the libraries used are well-known, open-source, and widely audited by the security community.
We implement appropriate technical and organizational measures to protect any information we do handle. Our website uses HTTPS encryption (TLS) for all communications. However, given that we do not collect or store your PDF files or passwords, the primary security architecture is the client-side processing model itself — it eliminates the risk of server-side data breaches for your documents by design.
PDFLocker is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you believe your child has provided us with personal information, please contact us and we will promptly delete it.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@pdflocker.com. Given our minimal data collection, most requests will be satisfied with confirmation that we hold no personal data beyond what you voluntarily submitted via contact forms.
California Residents (CCPA): We do not sell your personal information. You have the right to opt out of the sale of personal data, though no such sale occurs.
Our web servers may be located in countries outside your jurisdiction. Standard server access logs (non-PDF, non-personal content) may be processed in these locations. We maintain appropriate safeguards for any such transfers in compliance with applicable law.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Privacy Policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We are committed to working with you to resolve any privacy concerns. If you believe we have not adequately addressed your concerns, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.