Privacy Policy — PDF Cubby

1. Overview

PDF Cubby ("we", "us", or "our") operates pdfcubby.com. We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

2. Your files are never stored

We do not keep your documents. When you use a PDF tool (merge, split, compress, encrypt, redact, and so on), your file is processed only for the moment it takes to produce your result, held transiently in memory, and discarded the instant your download is ready. It is never written to long-term storage, never retained, never logged, and never read by a person. We do not use the contents of your documents to train anything, and we do not share them with anyone.

3. Information we collect

We collect only the minimum information required to operate the service:

Account information — email address and password (hashed) when you create an account.
Usage data — which PDF tools you use and when (e.g., "compress", "merge"), used solely to enforce free-tier limits and improve the service. No file contents are logged.
Payment information — billing details are collected and processed directly by Stripe. We never see or store your full card number.
Technical data — IP address and browser type, collected automatically by our hosting infrastructure for security and abuse prevention.
Anonymous site analytics — which pages are visited, which tool was used, and general device/browser/location information (country-level, not precise). This is collected by Umami, an analytics tool we run ourselves on our own server — it does not use cookies, does not track you across other websites, and is never shared with or processed by any third-party analytics company.

4. How we use your information

To provide and maintain the PDF Cubby service.
To authenticate your account and enforce usage limits.
To process subscription payments via Stripe.
To send transactional emails (account confirmation, billing receipts).
To detect and prevent fraud or abuse.

We do not sell your data, show you ads, or share your information with third parties except as described below.

5. Third-party services

Supabase — provides our authentication and database infrastructure. Your email and hashed password are stored on Supabase's servers (hosted on AWS). See Supabase Privacy Policy.
Stripe — processes all subscription payments. Stripe stores your billing information under their own PCI-compliant infrastructure. See Stripe Privacy Policy.

6. Data retention

Your documents are not retained at all. They are processed and discarded the moment your download is ready — there is nothing to delete later, and no copy exists for us to keep.

What we do keep is your account: your email address, which plan you are on, and a simple log of which tool was used and when. That log records the tool name and a timestamp only — never file names and never document contents. It is kept for as long as your account exists, so we can enforce the free daily limit and support you if something goes wrong.

If you ask us to delete your account, we remove it and its associated data within 30 days, except where the law requires us to keep records (for example, payment records).

7. Cookies

We use only strictly necessary session cookies to keep you logged in. We do not use advertising or tracking cookies. Our site analytics (see Section 3) is provided by a self-hosted copy of Umami running on our own infrastructure, which is cookieless by design and does not set any cookie in your browser at all.

8. Your rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Export your data in a portable format.

To exercise any of these rights, email us at contact@pdfcubby.com.

9. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, hashed passwords (bcrypt via Supabase Auth), and strict firewall rules. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children's privacy

PDF Cubby is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users via email for material changes. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Contact us at:
contact@pdfcubby.com
PDF Cubby, pdfcubby.com