Privacy
What LigriPDF does with your files and data
LigriPDF is a document workspace. This page explains, in plain language, what is stored, for how long, and who to ask if something is unclear.
Files you upload
- Free batch tools: the uploaded file is written to a temporary directory, processed, and deleted as soon as the download finishes. Nothing is kept for later, and nothing is used to train anything.
- Member studio: documents are held in server memory so you can continue working on them. They are not written to disk by default and are closed after one hour of inactivity.
- Share and signature links: these keep a copy of the document until the link expires — seven days by default, up to one year when you choose that.
Account data
Member accounts are issued by the operator; there is no public sign-up. For an account we store the username, a salted password hash (scrypt), the account role, the creation date, and — if two-step verification is enabled — the shared secret used to check codes. We never store the password itself.
Cookies
The site sets only what it needs to work:
pdf_session— keeps you signed in for seven days. HttpOnly, SameSite=Lax, Secure over HTTPS.pdf_lang— remembers the language you picked.pdf2fa— remembers that two-step verification was completed for this session.
There are no analytics scripts, no advertising pixels and no third-party conversion services. Server logs record the request path, status code, time and client IP; they do not contain document contents.
Who can see it
Documents are processed on a server operated by the operator of this site. They are not sent to an external conversion service. Access is limited to the operator and, for the shared hosting infrastructure, the hosting provider strictly as needed to keep the service running.
Your rights
Where data protection law gives you rights of access, correction, deletion, restriction, objection and portability, you can exercise them by writing to the operator. Because uploaded files are deleted within minutes and studio documents are closed after an hour of inactivity, in most cases there is nothing left to return by the time a request arrives. You also have the right to complain to the data protection authority in your country.
Who is responsible
Operator details are being finalised. This service is a preview while the operator completes registration. The contact address will be published here before the service opens to the public.
A public contact address is not published yet. The operator is finishing registration; the address will appear on this page before the service opens to the public. Nothing is being sold on this preview.
Changes
If this policy changes, the date at the top of the page changes with it. Material changes will be announced on this page before they take effect.