Privacy, in plain language.

Data controller

The controller for the compilapdf.it website is Alberto Gottardo. Contact for privacy and data rights: info@compilapdf.it.

PDFs, content and signatures

Your document is read, edited and exported by code running in the browser. It is not uploaded, transmitted to or stored on CompilaPDF servers; we do not know the file name, its contents or what you type.

If you choose to save a signature, the image remains in the browser’s localStorage on your device. You can remove it by clearing the site’s data.

The page also applies a Content Security Policy visible in its HTTP headers: it limits code network connections to CompilaPDF and Umami Cloud for anonymous statistics only, and blocks frames, form submissions and active content from unauthorized origins.

To enable offline use, the service worker stores only the app code, public pages and sample forms on the device. PDFs selected by users and exported documents never enter this cache.

Technical data and statistics

Cloudflare processes the technical data required to deliver and protect the site, such as IP address, request headers, and connection date and time. The legal basis is the legitimate interest in keeping the service secure and available.

When configured, Umami Cloud collects cookie-free anonymous statistics about visited pages, referrers, browser, operating system, device type and approximate location. Product events contain only technical data such as page count, presence of form fields and error codes: never document names or contents, entered text or signatures. Do Not Track is respected.

Statistics are retained for as long as needed to measure use and improve the service, with periodic reviews of older data.

When you email us

If you send an email, we process your address, message and any information you provide only to reply, manage the report and protect the service. The legal basis is the legitimate interest in handling communications requested by users.

Messages are retained for up to 12 months after the last exchange, unless they are needed longer for security, the establishment of legal claims or legal obligations. Do not send unnecessary documents or sensitive data.

Providers and external links

Cloudflare, Umami Cloud and Google/Gmail may process limited data as needed for infrastructure and communications. Some providers may process data outside the European Economic Area under the safeguards described in their terms and applicable law.

Links to Ko-fi and other websites are ordinary links: CompilaPDF sends them no data until you choose to open them. The external service’s own privacy notice then applies.

Your rights

You may request access, correction, deletion, restriction or object to processing by emailing info@compilapdf.it. You may also lodge a complaint with the Italian Data Protection Authority or your competent supervisory authority.

These rights concern data actually received, such as an email. We cannot retrieve PDFs or signatures because our systems never acquire them.