Privacy Policy

Welcome to CompressPDFtoAnySize (“we”, “us”, or “our”), accessible at compresspdftoanysize.com. We provide an online PDF compression service that allows you to reduce the file size of your PDF documents, as well as browser-based tools — Merge and Split — that run entirely on your device and never upload files to our servers. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

By using our service, you agree to the practices described in this policy. If you disagree with any part of this policy, please stop using the service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and any profile data provided through your chosen sign-in method (e.g. Google). We use Firebase Authentication to manage account creation and login — including Google sign-in. Firebase may collect device identifiers and IP addresses as part of the authentication process, governed by Firebase's privacy policy.

1.2 PDF Files You Upload

To compress your PDF, you upload your file to our servers. We treat your files as strictly private:

• Files are processed on our servers solely to perform the compression.
• We do not read, analyse, index, or share the contents of your files.
• Files are automatically deleted within 2 hours of being uploaded. Our cleanup process runs every 30 minutes, so in the worst case a file may remain on our servers for up to 2.5 hours before it is permanently removed.
• You can also delete your files immediately at any time from the My Data page.

1.3 Browser-only tools: Merge & Split

Our Merge (/merge) and Split (/split) tools run entirely in your web browser using your device's processing power. We do not receive, store, or process any PDF files on our servers when you use these features, and we have no access to their contents. The output files — merged or split PDFs — are created locally in your browser and are never transmitted to us. Standard website analytics may still record that you visited these pages, as with any page on our site.

1.4 Usage Data

We track how many PDF pages you have compressed in the current billing cycle to enforce your plan's quota (Free: 20 pages/month; Pro: unlimited). This count resets automatically at the end of each billing cycle.

1.5 Payment Information

Payments for the Pro plan are handled entirely by DodoPayments. We do not store your credit card number, CVV, or full payment card details on our servers. DodoPayments processes all payment data securely. We receive only non-sensitive billing confirmation data (e.g. subscription ID, status, renewal dates) necessary to manage your subscription.

1.6 Analytics Data

We use Google Analytics (GA4) to understand how visitors use our website. This may include your IP address (anonymised), browser type, pages visited, session duration, and general geographic region. This data is aggregated and not used to personally identify you. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on.

1.7 Technical and Log Data

Our servers may automatically log your IP address, request timestamps, and HTTP response codes for security monitoring, rate-limiting enforcement, and debugging purposes. These logs are retained for a limited period and are not shared with third parties except as required by law.

2. How We Use Your Information

• To provide the PDF compression service and process uploaded files; to host the website including the browser-based PDF Merge and Split tools.
• To create and manage your account, including plan quota tracking.
• To process payments and manage your subscription through DodoPayments.
• To enforce rate limits and prevent abuse of the service.
• To send transactional emails (e.g. payment receipts, subscription changes) — we do not send marketing emails unless you separately opt in.
• To improve and maintain the service through aggregated analytics.
• To comply with legal obligations.

3. File Retention and Deletion

We take file privacy seriously. The following lifecycle applies only to PDFs you upload for compression. PDFs you process using our in-browser Merge or Split tools never leave your device and are not stored on our servers.

Here is the exact lifecycle of an uploaded compression file on our servers:

We strongly recommend downloading your compressed file promptly after compression. Once deleted, files cannot be recovered.

4. How We Share Your Information

We do not sell your personal data. We share data only in the following limited circumstances:

• Firebase (Google): Authentication and identity management. Your email and sign-in credentials are managed by Firebase.
• DodoPayments: Payment processing for Pro plan subscriptions. DodoPayments receives your payment card details and billing information directly.
• Google Analytics: Aggregated, anonymised usage data for site analytics.
• Legal obligations: We may disclose information to law enforcement or government authorities if required by applicable law or a valid legal process.
• Business transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction. We will notify you in advance where possible.

5. Cookies

We use a small number of cookies and similar technologies:

Essential cookies cannot be disabled as they are required for the service to function. You can block analytics cookies via your browser settings or using the Google Analytics opt-out tool.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• All file transfers to and from our servers are encrypted via HTTPS/TLS.
• File uploads use short-lived, pre-signed URLs to prevent unauthorised access.
• Access tokens expire after 15 minutes, limiting exposure if intercepted.
• Files are automatically purged within 2.5 hours, minimising exposure time.
• Rate limiting (5 requests/minute for Free, 20 requests/minute for Pro) protects against abuse.

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of personal data we hold about you.
• Deletion: Request deletion of your account and associated data. You can also delete your uploaded files at any time from the My Data page.
• Correction: Request correction of inaccurate personal data.
• Objection: Object to processing of your data where we rely on legitimate interests.
• Portability: Request your data in a portable, machine-readable format where applicable.

To exercise any of these rights, please contact us at the email address provided in Section 10 below.

8. Children's Privacy

Our service is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify registered users via email. Continued use of the service after changes take effect constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: