Privacy Policy

TL;DR

PDFs are processed locally in your browser. Optional Drive features transfer selected files directly between your browser and Google Drive.

We keep only short-lived technical logs and run no analytics or tracking pixels.

Controller & Contact

PDF Plan is provided by w69b GmbH, Schwabstr. 41, 72108 Rottenburg, Germany. Contact us at mb@w69b.com.

What Data We Process

Our infrastructure stores short-lived server logs (IP address, browser information, timestamps) to operate and secure the service. Logs are automatically deleted after a brief retention period.

If you email us, we process the information you provide solely to handle your request.

PDF Processing

PDF processing takes place on your device. We do not upload PDF content or annotations to our servers. If you choose Google Drive, your browser downloads and saves the selected PDF directly through Google’s APIs.

Data Accessed

File metadata (name, ID, MIME type, and size) for the Drive items you select while choosing PDFs to process.

The binary file content of the selected PDFs so they can be processed.

Short-lived OAuth tokens issued by Google to authorise Drive actions. These tokens stay within your app session and are not transmitted to our servers.

Data Usage & Processing

We request the drive.file scope, which allows the app to view and manage the files you explicitly choose or create with PDF Plan, and the drive.install scope that allows to open the app with pre-selected files from the Google Drive UI directly.

File metadata is used solely to display the items you picked and to operate the processing workflow; we do not crawl or index any other files in your Google Drive.

When you save a Drive PDF, your browser uploads the edited PDF directly to Google Drive and updates the selected file. Save as downloads a local copy.

Storage & Sharing

We do not store Google user data on our infrastructure or use it for advertising or AI training. Drive file data and OAuth tokens stay in browser memory during the session. PDF Plan can store your working document and annotations locally in your browser to restore your work; OAuth tokens are not saved there.

Legal Bases

Article 6(1)(f) GDPR (legitimate interest) for operating the website, ensuring availability, and responding to enquiries.

Retention

Runtime metadata (for example request IP addresses) is processed by Cloudflare edge services (including Workers and CDN caching) and may be retained for up to 72 hours under Cloudflare's default diagnostic log retention.

Your Rights

You have the right to access, rectify, erase, or restrict processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also complain to your local supervisory authority.

To exercise these rights, please use the contact details provided in our Impressum.

Children

Our service is not directed at children under 16, and we do not knowingly process personal data from children. If you believe a child has provided information to us, please get in touch so we can remove it.

Google API Services User Data

PDF Plan’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

User Control

You may revoke the application's access to your Google Drive data at any time from your Google Account security settings by visiting https://myaccount.google.com/permissions.