Plain-English privacy
Your PDF stays on your device.
No Fuss PDF is built so the files you edit do not need to leave your browser.
Who is responsible for this service?
No Fuss PDF is operated by Rust Solutions Ltd. Rust Solutions Ltd is the data controller for the limited operational and referral data described on this page.
What “browser-local” means
When you choose a PDF or image, your browser reads it from your device. PDF.js renders PDF pages in the page. pdf-lib fills, signs, merges, splits, or creates PDFs in browser memory, and your browser saves the result. PDF-to-JPG conversion also renders entirely in your browser. The source files and generated files are not sent to No Fuss PDF’s servers.
This includes the PDF or image bytes, document text, form answers, signatures, filenames, titles, authors, and other document metadata. They remain on your device.
What we do collect
We record a small set of operational events to understand whether the tools work: page viewed, tool started, signature created and placed, processing completed, download started or completed, and broad error categories. Events can contain a processing-time range, device type, browser family, and a referral ID.
These events contain no data from or about your document and no personal identifying data. They never include your name, email address, network address, filename, document title, author, metadata, extracted text, PDF or image bytes, form text, signature image, or document contents.
We use randomly generated anonymous visitor and session IDs to count repeat visits and follow one browser session. These random IDs are not based on your identity, are not linked to an account, and do not tell us who you are.
Referral attribution
If you arrive through a valid referral link, the short referral ID is stored in your browser for 30 days and attached to those anonymous operational events. This lets us count referrals and successful downloads. It is not used to inspect or identify your documents.
How the boundary is enforced
The application has no document or image upload endpoint. Its content security policy only permits same-origin network requests. Analytics uses a typed, allow-listed event object that has no field for a filename, form answer, arbitrary metadata, signature, or file data. Automated browser tests inspect outgoing requests for these prohibited values.
Local storage
A random anonymous visitor ID, a session ID, and an optional referral ID may be stored in your browser. You can remove them at any time by clearing this site’s data. No account is created.