Skip to content
OP

GDPR Information

Last updated: October 14, 2026

1. Data controller

The controller of personal data is Leszek Hofman, Dąbrówka Nowa, Poland (optimapdf.com). Contact for anything concerning your data: kontakt@optimapdf.com.

2. What data we process and why

  • Your files — we do not process them on a server. All file tools run in your browser and the file does not leave your device.
  • Text sent to the AI features — we pass it through our server to OpenRouter and the model provider to carry out your request (summary, translation, answer). We do not store it.
  • The page address for URL to PDF — our server downloads that page and makes a PDF. We do not store it.
  • IP address — to count request limits (AI: 24 hours, URL to PDF: 10 minutes) and prevent abuse; in the server log only for a rejected request, and shortened.
  • Visit data in Google Analytics — only with your consent.
  • Settings (theme, language, analytics choice) — stored only in your browser.

3. Legal bases

  • Art. 6(1)(b) GDPR — providing the service you request (AI features, URL to PDF).
  • Art. 6(1)(f) GDPR — legitimate interest: security and request limits.
  • Art. 6(1)(a) GDPR — consent to Google Analytics.

4. Retention

  • Files, text sent to the AI and page addresses for conversion: not stored.
  • Request-limit counters with the IP address: 24 hours (AI) and 10 minutes (URL to PDF).
  • Server logs at the hosting provider: 1 hour (current Vercel plan).
  • Google Analytics: at most 14 months.
  • Settings in your browser: until you delete them; the language cookie up to 12 months.

5. Recipients

We do not sell data or share it for marketing. Data is processed on our behalf by Vercel Inc. (hosting), Upstash, Inc. (request-limit counters), OpenRouter, Inc. and the model provider (AI features only), and — with your consent — Google LLC (Google Analytics). All are based in the USA.

6. Transfers to third countries

The application server runs in the USA, so the data in section 2 (other than files and browser settings) is transferred to the USA. Vercel and Google are certified under the EU-US Data Privacy Framework (Commission Decision (EU) 2023/1795); Upstash and OpenRouter process data under their data processing terms.

7. Your rights

  • Access (Art. 15) and rectification (Art. 16).
  • Erasure (Art. 17) and restriction of processing (Art. 18).
  • Data portability (Art. 20) and objection (Art. 21).
  • Withdrawing consent at any time — for Google Analytics with the "Cookie settings" button at the bottom of the page.

8. How to exercise your rights

Write to kontakt@optimapdf.com. We reply within 30 days, free of charge (unless a request is manifestly unfounded or excessive — Art. 12(5) GDPR). There are no accounts, so technical data usually cannot be linked to a particular person (Art. 11 GDPR).

9. Complaints

If you believe we process your data in breach of the GDPR, you may lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

10. Cookies and browser storage

We use one necessary cookie (x-detected-locale — the site language, up to 12 months) and localStorage for settings. Google Analytics cookies (_ga, _ga_*) appear only after your consent and are removed when you withdraw it. We use no advertising cookies.

11. Changes

We update this information when the way the site works changes; the date of the last change is at the top of the page.

← Back to homepage