Privacy notice

This notice explains the data PDFLP currently processes for accounts, documents, landing pages, leads, analytics, security and support. PDFLP is independently operated by Yang Maojuan Dàshū (羊毛卷大叔) from China.

By PDFLP · Last updated

On this page7 sections

Data we collect

  • Account name, email, password hash and session records.
  • Workspace and public publisher settings.
  • Uploaded PDFs, rendered pages, extracted text and page metadata.
  • Landing page content and publication settings.
  • Lead form data including email, optional name or company and consent record.
  • Anonymous page and interaction events.
  • Support and contact messages.
  • Security signals used for rate limiting and challenge verification.

Why we use it

  • Authenticate users and protect workspaces.
  • Render, store and publish customer documents.
  • Deliver requested downloads and lead notifications.
  • Measure reading depth, CTA clicks and form conversion.
  • Prevent abuse and investigate security issues.
  • Respond to support, privacy and legal requests.
  • Meet billing, tax and accounting obligations when paid checkout is enabled.

Service providers

Cloudflare provides Workers, D1, R2, Queues, Containers, Turnstile and email sending. Creem is the intended Merchant of Record for paid subscriptions and handles payment card data, applicable tax and invoices when enabled.

A current processor list should be maintained before selling into regulated jurisdictions or signing enterprise data-processing agreements.

Cookies and local storage

PDFLP uses an HttpOnly session cookie for authentication. Turnstile may set security-related storage on its challenge domain. Public pages may use a local anonymous identifier for event deduplication.

See the cookies page for the current categories.

Retention and deletion

Workspace content remains while the account is active unless the owner deletes it. Soft-deleted records and operational logs may remain for a limited period for recovery, security and integrity checks.

To request account or personal-data deletion, contact PDFLP with the account email and relevant URLs. Requests may require verification.

Your choices

  • Access, correction and deletion requests.
  • Objection to processing where applicable law provides that right.
  • Control over whether a landing page is searchable.
  • Download-token expiration and limited reuse.
  • Contact preferences for future marketing, separate from a requested download.

Operator and contact

PDFLP is independently operated by Yang Maojuan Dàshū (羊毛卷大叔), an individual software developer based in China.

Use the contact form for privacy questions, access requests or deletion requests. Requests may require verification of the account email.