Privacy notice
This notice explains what TinyPDF processes when you use its current PDF tools.
Files and settings
When you convert images, TinyPDF receives the selected image files and conversion settings needed to create the PDF. Uploaded images and the generated PDF are placed in a restricted temporary working directory for the active request. That directory is normally removed after the response completes or if the conversion fails.
As a safeguard against interrupted requests or service failures, an automated cleanup runs every 15 minutes and removes temporary files older than two hours. TinyPDF does not copy temporary files into permanent application storage or conversion history.
TinyPDF does not currently provide accounts, permanent file storage, conversion history, or analytics cookies.
Public image URLs
If you import a public image URL, TinyPDF’s server requests that address and returns the verified image to your browser. The remote host can observe the server request. Private, loopback, link-local, metadata-service, credential-bearing, and nonstandard-port targets are blocked.
Dropbox imports
If you choose Dropbox, Dropbox displays and operates its own file chooser using your existing Dropbox session. TinyPDF receives short-lived direct links only for the files you explicitly select; it does not receive your Dropbox password, an OAuth access token, or access to browse the rest of your account. Your browser downloads those selected files immediately and adds them to the same local queue as device files. The files are sent to TinyPDF’s server only when you start conversion. Dropbox processes the chooser interaction under its own privacy terms.
Technical request data
Hosting, proxy, and security systems may process basic connection information such as IP address, request time, requested path, user agent, and response status to operate and protect the service. File contents are not intentionally written to application logs.
Service providers and disclosure
TinyPDF may rely on hosting, network, and security providers to deliver the service. Data may be disclosed when required by law or when reasonably necessary to protect users, the service, or the public.
Your choices
Do not upload a file you do not want processed by the service. You can stop before conversion, remove selected images from the queue, or use an offline tool instead.
Contact
For privacy questions, email [email protected].