Privacy policy.
Last updated: 8 September 2026
The short version: the files you open in the PDF tools on this site are never sent to us or to anyone else. All processing happens inside your browser, on your own computer.
1. Who is responsible
This site is run by the Nivela team. For anything about privacy or your data, write to [email protected].
2. Your files
The PDF tools (merge, split, compress, extract pages, PDF to images and images to PDF) run entirely in your browser, using JavaScript libraries that execute on your machine.
- No file is sent to a server of ours or of anyone else.
- No file is stored, copied or analysed by us.
- When you close or reload the page, everything loaded disappears from memory.
You can check for yourself: the tools keep working even if you turn off your internet connection after the page has loaded.
3. Data you deliberately give us
Outside of a subscription, covered in the next section, the only personal data we may receive is the email address you type into the plugin waiting list, and only if you submit the form.
- Purpose: to tell you when the plugins launch and about pre-launch conditions.
- Why we may do this: your consent, given when you submit the form.
- Sharing: we do not sell or hand your address to third parties.
- Unsubscribing: every email we send carries an opt-out link, and you can ask to be removed at any time through the contact address.
4. Subscription, payment and licence
If you subscribe to Nivela AutoDimension, we begin processing the data below. This section describes exactly what is recorded, and nothing beyond it.
Payment is processed by Stripe. Your card details are typed into Stripe's environment and never pass through our servers: we do not receive, see or store card numbers, expiry dates or security codes. Stripe acts as controller of the payment data, under its own privacy policy.
What we keep in our database:
- Your email address and the identifiers Stripe returns to us (customer and subscription ids), to link the payment to the licence.
- The licence key, the subscription status and the end date of the paid period.
- Activated devices: a random identifier generated on your computer the first time it runs, the computer name (the same one Windows displays), and the activation and last-seen dates.
The device identifier is a random number created locally. It is not a hardware fingerprint: we do not read disk, processor or motherboard serial numbers, or any characteristic of the machine. It exists only to honour the limit of 2 devices per subscription and to stop the same computer restarting the free trial indefinitely.
- Purpose: to operate the licence, bill the subscription and provide support.
- Why we may do this: it is necessary to perform the contract you are party to.
- Sharing: with Stripe, to process the payment, and with the email delivery service, to send the licence key and the sign-in link. We do not sell or hand your data to anyone else.
- Where it lives: in a Cloudflare database.
5. Signing in to your account
The customer area accepts two ways in, and neither uses a password. We do not create, ask for or store any password.
- Email link: you type your address and we send a sign-in link valid for a limited time and usable once. We store only a hash of the link, never the link itself.
- Sign in with Google: we ask Google only for your email address, and only to recognise which subscription is yours. We do not ask for your name, photo, contacts, calendar or any other data from your Google account.
6. Third-party services the page loads
The pages on this site, including this one, load everything from our own domain: text, styles and fonts. No third-party server is contacted while you browse them.
The exception is the PDF tools, which fetch their processing libraries from an external service. That means the service sees your IP address, as happens on any site:
- cdnjs (Cloudflare), the libraries that process PDFs inside your browser.
Those services receive only the request for the file. None of your documents pass through them.
7. Cookies and tracking
This site uses no cookies, has no social network pixel and builds no browsing profile.
We measure audience in aggregate with Cloudflare Web Analytics: how many visits each page received, which country they came from, which browser, and how long the page took to load. That measurement uses no cookies, stores no identifier in your browser and does not follow you across sites. We have no way to know that two visits are the same person, or to tie a visit to anyone.
We use it for one question only: which pages people read before subscribing. There is no remarketing, and we neither sell nor share these numbers.
8. Your rights
At any time you can ask us to confirm what we hold, to give you a copy, to correct it, to hand it over in a portable format, or to delete it, and you can withdraw your consent. Write to [email protected]; we reply within 15 days.
Some data has to stay while your subscription is active, because without the licence key and the device list the plugin cannot work. Deleting it means ending the subscription.
9. Changes to this policy
If anything changes in how the site handles data, we update this text and the date at the top of the page.