Legal
Privacy Policy
Last updated: May 28, 2026
Overview
paperless.tools provides document utilities on the web and in the Paperless Tools iOS app (tools.paperless.app). Most tools process your files entirely on your device. We designed the product so PDFs, scans, signatures, and OCR output are not uploaded for routine document tasks.
The URL shortener is the only feature that sends user-provided data to our servers. Everything else runs locally in your browser or on your device.
On-device processing
Document scanning, merging, splitting, compression, redaction, cropping, signing, OCR, and similar features run locally in your browser or on your iPhone/iPad. We do not receive the contents of those documents.
URL shortener (server storage)
When you use the URL shortener on the website or in the iOS app, the original URL is sent to our server at paperless.tools via POST /api/shorten. We save your link on our servers so the short URL works and you can view basic click statistics.
We store the following in Cloudflare KV (our link storage):
- Original URL — the address you submitted, mapped to a short code
- Short code — the random identifier used in links like
/x/abc12 - Click statistics — when someone opens a short link, we record the time of the click, approximate country (from Cloudflare request headers), and referer (where the click came from, if available)
Click stats are available on the stats page (/stats/{code}) for links you create. This data is used only to operate the shortener and show you redirect counts — not for advertising or cross-app tracking.
All URL shortener records (the link mapping and click statistics) are automatically deleted after 72 hours. This retention period is also disclosed in the iOS app before you shorten a link.
URL shortener data is not linked to an account, is not used for advertising, and is not sold to third parties.
Data stored on your device
The iOS app may store the following locally on your device:
- Saved signatures (Fill & Sign)
- Teleprompter scripts and settings
- Temporary exported files in the system temp folder (cleaned automatically)
This data stays on your device unless you delete the app or clear app data.
What we do not collect
- No account registration is required
- No advertising or analytics trackers in the iOS app
- No sale of personal data
- No upload of document content for on-device PDF tools
Third-party services
The URL shortener uses HTTPS to our own infrastructure hosted on Cloudflare. Standard TLS encryption protects data in transit. The iOS app declares that it uses only exempt encryption (HTTPS).
Children
Our services are not directed at children under 13, and we do not knowingly collect personal information from children.
Changes
We may update this policy from time to time. Material changes will be reflected on this page with an updated date.
Contact
Questions about privacy? Visit paperless.tools and use the feedback option in the site footer.