privacy

Privacy Policy

Last updated: August 14, 2026

This is an English translation of our German-language privacy policy ("Datenschutzerklärung"), which governs the operator's data-protection obligations under EU/German law. In case of any discrepancy, the German version at /de/datenschutz/ is authoritative.

1. Summary

Your PDF files are never sent to a server. All the editing runs in your local browser. We have no access to your documents. There is no upload, no server-side storage and no cloud.

This website uses Google AdSense to display advertising. This may involve cookies being set and personal data (e.g. your IP address) being transmitted to Google. We also use Matomo for web analytics — self-hosted on our own server, with no data shared with third parties. Details below.

2. Data Controller

Responsible for this website and the related data processing:

Markus Schweitzer IT Beratung
Turbinenstraße 7
70499 Stuttgart
Germany
Phone: +49 711 2525 2201 (Mon–Fri 9:00–18:00 CET)
Email: [email protected]

Full contact details are available in the legal notice.

3. Processing of Your PDF Files

mousePDF is a purely client-side application. When you open a PDF file, it is loaded and processed exclusively in your browser. The file does not leave your device. There is no server that receives, stores or processes it. That also makes it safe to work on confidential documents in mousePDF.

Technically, this uses the open-source libraries pdf.js (viewing) and pdf-lib (writing), which run directly in the web page.

4. Google AdSense (Advertising)

This website displays advertising via Google AdSense, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

4.1 Cookies

Google AdSense may store cookies on your device. These cookies allow Google to measure your use of the website and tailor advertising to your interests. The cookies do not contain direct personal data, but a pseudonymous user identifier.

The following cookies may be set (selection):

4.2 Data Transfer

When an ad is displayed, the following data may be transmitted to Google:

4.3 Google Services in the EEA/Switzerland

In the European Economic Area (EEA) and Switzerland, Google AdSense is used in accordance with user consent. You can withdraw your consent at any time by deleting cookies in your browser or adjusting your browser's cookie settings.

4.4 Transfer to Third Countries

Google may transfer data to servers in the US and other third countries. For transfers to the US, Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection.

4.5 Legal Basis

Processing is based on Art. 6(1)(f) GDPR (legitimate interest: funding the free website through advertising) and, where consent has been obtained, on Art. 6(1)(a) GDPR.

4.6 Objection

You can object to personalized advertising by:

5. Fonts (Self-Hosted)

This website uses the fonts Inter, JetBrains Mono, and Caveat. All three are licensed under the SIL Open Font License 1.1 and are hosted locally on our server — there is no connection to Google Fonts or other third parties. No IP address is transmitted to third parties when loading the fonts.

License files are available at /vendor/Inter-OFL.txt, /vendor/JetBrainsMono-OFL.txt, and /vendor/Caveat-OFL.txt.

6. Hosting

This website is hosted on a server reachable via Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) as a content delivery network. When you visit the website, your IP address may be transmitted to Cloudflare to speed up delivery and protect against attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: stable and fast delivery of the website).

7. Cloudflare Turnstile (Contact Form Bot Protection)

The contact form at /contact/ is protected against automated spam requests (bots) by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Turnstile is a privacy-friendly challenge system that distinguishes human users from bots — without CAPTCHA solving or behavioral tracking.

When the contact form is opened, a script from challenges.cloudflare.com is loaded, embedding a small widget iframe. This may transmit the following data to Cloudflare:

Verification happens server-side: the token is sent to and validated by Cloudflare's siteverify API. Cloudflare stores the data in accordance with its own privacy policy and deletes it after a short time.

No tracking: Turnstile does not analyze user behavior across sites and does not build a profile. No cookies are set for user identification.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: protecting the contact form from automated abuse and spam).

Further information: Cloudflare Privacy Policy, Cloudflare Turnstile.

8. Server Log Files

The hosting provider and Cloudflare automatically store technical log files generated when the website is accessed: IP address (truncated), date and time, URL accessed, browser type, referrer. This data is stored for technical operational security and to defend against attacks, and is automatically deleted after a maximum of 14 days.

9. Your Rights

Under the GDPR, you have the following rights:

To exercise your rights, contact the email address above.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

11. Important: mousePDF Does Not Process Your PDF Content

Editing your PDF files happens exclusively locally, in your browser. No data from your PDF file is transmitted to us or to third parties. The processing described above (AdSense, fonts, hosting) relates only to the website itself, not to the contents of your PDFs.

12. Changes

This privacy policy may be updated if legal requirements or the services used change. The current version is always available on this page.

13. Matomo (Web Analytics)

This website uses Matomo, open-source analytics software. Matomo runs exclusively on our own server at matomo.mousepdf.com. No data is transmitted to third parties and none is shared with advertising networks. Matomo runs on every page of this website, including the editor.

13.1 Operation without cookies

Matomo is configured on our site so that no cookies are stored on or read from your device. Returning visits are not permanently linked together.

13.2 Data Collected

We collect: the URL visited, the referrer URL, browser type and operating system, screen resolution, date and time, and your truncated IP address. The IP address is truncated by at least two bytes before storage, so it cannot be used to identify you personally. Location is determined at most at country level.

13.3 Retention Period

Raw data is deleted after six months; only aggregated reports without personal reference are retained after that.

13.4 Legal Basis

Art. 6(1)(f) GDPR. Our legitimate interest lies in the needs-based design and technical improvement of this website. Because the analysis takes place without cookies, without a persistent identifier, and with a truncated IP address, the impact on your rights is minimal.

13.5 Objection

You can object to data collection at any time. Clicking the switch below is enough; your setting is stored locally in your browser. Matomo also respects your browser's Do-Not-Track setting.

Open editor →