Privacy and terms
Last updated 7 November 2026
Your files stay on your device
PDF Editor runs entirely in your browser. The PDFs you open, everything you change in them, your signatures and your certificate files are handled on your device and are never uploaded. There's no server behind the editor that could receive them, and its security policy stops the page sending data to any other site. The one exception is sending a document for signing, which you have to choose, and which happens on a separate site (below).
There are no accounts, no ads and no analytics, and the app sets no cookies. Cloudflare, which hosts the site, may set a security cookie to tell people from automated traffic.
What's kept in your browser
- Unsaved work. While you edit, a copy of the PDF is kept so it can be offered back after a crash or reload. It's deleted when you save or choose Discard. The password of a protected PDF is never kept. On a shared computer, save or discard your work before you leave.
- Signatures you choose to remember, the five most recent, until you remove them.
- The app itself, so it opens quickly and works offline. This holds no documents.
- Small settings, such as having closed the tip bar.
All of this stays in this browser on this device. Clearing the site's data in your browser removes it.
Sending a document for signing (beta)
Send for signing is the one thing that uses a server, and it runs on a separate site, sign.tenziki.com, so the editor itself still never uploads anything. When you use it, the PDF is handed to that site on your device and encrypted there before it's uploaded. The key is only in the signing links, after the #, which browsers don't send to servers, so the signing service stores the document but can't read it.
The signing service does keep: the names and email addresses of the sender and signers, one-time email codes (stored only as a keyed hash), who has signed and when, whether each invitation email was sent or failed, and an audit log with times, IP addresses and browser details. The log is added to the signed PDF as its last pages; IP addresses and browser details appear only on the sender's copy, and signers see only names, times and what happened. Emails are sent through Mailjet, with open and click tracking switched off, and Mailjet may keep copies of them for a time. Unless the sender chooses to send the links themselves, the invitation emails (and the "your turn" emails, and an invitation the sender sends again) contain the links, keys included, so the signing service sees the key while it writes them. With "I'll send the links myself" the key never reaches the signing service.
Everything is deleted 7 days after everyone has signed or, if not everyone signs, 7 days after the links expire. The sender can delete it sooner from the status page. To limit abuse, the service also keeps short-lived counters keyed by email address and IP address (how many codes and emails were sent, and wrong codes tried); they're deleted within two days.
Hosting
The site is served by Cloudflare. Like any web host, Cloudflare handles your IP address and browser details to deliver the site's files and protect it from attacks. Your documents are not part of that, because they never leave your device.
If you contact us
If you email us about a problem, we use what you send only to answer you and fix the problem. "Report a problem" fills in your browser's name and version, which you can delete before sending. Please don't attach private documents: describe the problem, or send a PDF with nothing sensitive in it.
Terms of use
- PDF Editor is free to use, for personal and business documents.
- It's provided as is, without any warranty. We do our best, but we can't promise it's free of errors, and we aren't liable for any loss that comes from using it. Keep a copy of your original files.
- Check redactions in the saved file before you share it. Redact removes what it can find under each box, but it doesn't change bookmarks, the document's title and other metadata, or the alternative text of tagged PDFs. A large shape only partly under a box, such as a page background, is covered rather than removed.
- Check digital signatures in a PDF reader such as Adobe Acrobat Reader. PDF Editor creates them but doesn't check them, and whether a signature counts as legally binding depends on where you are and what you're signing.
- Nothing here is legal advice.