Privacy Policy

Exactly what happens to your file

Here is the complete lifecycle of a file you upload to MyPDFBoy:

1. You select a PDF. It is loaded into your browser's memory only.
2. When you click Redact or Download, your browser sends the file to our backend server over an encrypted HTTPS connection.
3. The server processes the file in RAM — applying redactions or watermarks. The operation typically takes 1–5 seconds. No file is written to disk.
4. The processed PDF is sent back to your browser. Your identity is never attached to the file. Anonymized content may be retained for training our own redaction models — see "How processed files help improve the tool" below.

Nothing about the file is ever linked back to you. Closing the tab closes your session.

What the backend server does

PDF redaction is a technically complex operation that requires server-side processing. Here is what the server does and does not do:

• Receives your file over HTTPS, processes it in memory, returns the result. No disk writes.
• Does not log file names, file contents, or any identifying information about the document.
• Does not share your file with any third party. Processing happens on our own infrastructure.

What we collect about YOU

Nothing personal. We do not store your identity, your email, your IP address, your session, or any metadata that links a file to you. For what we do retain from processed files — fully anonymized — see the section below.

How processed files help improve the tool

MyPDFBoy is free because anonymized content from files processed here contributes to training our own auto-redaction AI. That's the trade: free tool, anonymous contribution.

Our rules — non-negotiable

• Anonymized: no names, emails, IP addresses, account identifiers, filenames, timestamps, or any metadata that could link a file back to you.
• Own models only: training happens in-house on our own infrastructure. We do not ship your content to OpenAI, Google, Anthropic, or any third-party AI provider.
• Never sold, never shared: training data is never sold, licensed, syndicated, or otherwise handed to third parties. Ever.
• Right to delete: email [email protected] to have content from any of your sessions purged.

Why we do it this way

Auto-redaction — a model that suggests where to redact on a new document — is the feature no free tool offers. Building it requires training on real redaction patterns, not synthetic ones. Users get a free tool with no ads, no signup, no quota; we get to build better redaction over time. Nothing personal is retained and nothing leaves our infrastructure.

Your legal basis under GDPR

• Legitimate interest: improving a redaction tool requires training on real redacted content. All identifying metadata is stripped at ingestion.
• Data minimization: only redaction-relevant signals (zone positions, under-zone content, layout) are kept; everything else is discarded.
• Anonymization: training records contain no direct or indirect identifiers — they cannot be re-linked to a person.
• Deletion on request: write to [email protected] to exercise your right to erasure.

By processing a file on MyPDFBoy, you agree to these terms. If you do not, do not upload a file.

Cookies and local storage

MyPDFBoy does not set tracking cookies. The only data stored in your browser is your theme preference (dark/light mode) and language preference via localStorage. These never leave your device.

Analytics

We do not use Google Analytics, Facebook Pixel, or any third-party tracking service. We do not serve ads. We do not build user profiles.

Error monitoring

We use Sentry to capture JavaScript errors and backend exceptions so we can fix bugs. Sentry is configured to strip IP addresses and not collect personally identifiable information. Error reports contain technical details only (error message, stack trace, browser type).

Server logs

Our server logs record request metadata (HTTP method, URL path, response status, timing) for operational monitoring. IP addresses and file names are automatically stripped from all log entries. Logs are retained for 7 days and then deleted.

Free plan watermark

Free downloads include a small footer watermark on page 1 reading "Redacted with MyPDFBoy — mypdfboy.com". This is disclosed before your first download. The watermark contains no tracking identifiers and no personal data.

Third-party services

• Cloudflare — CDN and DDoS protection. Cloudflare may process connection metadata per their privacy policy.
• Sentry — Error monitoring (PII stripped). See Sentry's privacy policy.

Your rights under GDPR

Since we do not collect or store personal data, there is nothing to access, correct, or delete. If you have questions about this policy, contact us at [email protected].

Changes to this policy

We may update this policy. Changes will be posted on this page with an updated date.