How long we keep your files

In your browser: never uploaded

When a tool can do the work in your browser, it does. Merging, splitting, rotating and reordering all run on your own machine for files under the browser limit, and the page says so while you are using it. No copy is made anywhere else, because no copy is sent anywhere else.

On our servers: two hours

When a file is too large for the browser, or the tool needs software a browser does not have, the file is uploaded. From then on:

• The upload goes straight from your browser to our storage, through a link valid for one file for fifteen minutes.
• It is stored under a number in a folder named for the job. The name of your file is not used and is not kept.
• The work runs in a container with no network access, opened for that job and destroyed when it finishes.
• Inputs and outputs are deleted within two hours of the job finishing, by a task that runs on a schedule.
• Storage deletes anything older than a day on its own, whether or not that task ran.

What is not kept at all

We do not keep the contents of a file, the name of a file, or your IP address. The record a finished job leaves is its identifier, which tool ran, the sizes involved, how long it took and whether it worked.

The hashed address that connects that record to a visitor is removed too, 24 hours after the files go. Daily usage counts are deleted after 30 days. After that the record is not connected to anybody at all.

Download while you can

A finished file is yours to download for the two hours it exists. After that it is gone and cannot be brought back, by you or by us. There is no archive and no backup of your documents to restore from.