Plain-English privacy
Your PDF stays on your device.
No Fuss PDF is built so the files you edit do not need to leave your browser.
Who is responsible for this service?
No Fuss PDF is operated by Rust Solutions Ltd. Rust Solutions Ltd is the data controller for the limited operational data described on this page.
What “browser-local” means
When you choose a PDF or image, your browser reads it from your device. PDF.js renders PDF pages in the page. pdf-lib fills, signs, merges, splits, or creates PDFs in browser memory, and your browser saves the result. PDF-to-JPG conversion also renders entirely in your browser. The source files and generated files are not sent to No Fuss PDF’s servers.
This includes the PDF or image bytes, document text, form answers, signatures, filenames, titles, authors, and other document metadata. They remain on your device.
What we do collect
We record a small set of operational events to understand whether the tools work: homepage viewed, tool link selected and its general position on the page, tool started, signature created and placed, processing completed, download started or completed, and broad error categories. Events can contain the selected tool, a processing-time range, device type, browser family and a coarse discovery category such as direct, search, Reddit, GitHub or AI assistant.
These events contain no data from or about your document and no personal identifying data. They never include your name, email address, network address, filename, document title, author, metadata, extracted text, PDF or image bytes, form text, signature image, document contents, referring URL, search query or campaign name.
We use randomly generated anonymous visitor and session IDs to count repeat visits and follow one browser session. These random IDs are not based on your identity, are not linked to an account, and do not tell us who you are.
How the boundary is enforced
The application has no document or image upload endpoint. Its content security policy only permits same-origin network requests. Analytics uses a typed, allow-listed event object that has no field for a filename, form answer, arbitrary metadata, signature, or file data. Automated browser tests inspect outgoing requests for these prohibited values.
Local storage
A random anonymous visitor ID and session ID may be stored in your browser. You can remove them at any time by clearing this site’s data. No account is created.