Privacy Policy

What we process

• Uploaded files (PDFs or images) needed to run the tool you selected.
• Generated output files so you can download results.
• Minimal account, billing, and contact data when you use sign-in, payments, or support.
• Task files are not stored in a Supabase Storage bucket or a permanent user file library in the current deployment.

How processing works

• Some tools run entirely in your browser on the current device and do not upload the file for the core operation.
• Server-side tools use temporary processing on SentryPDF's Fly.io deployment. The production web app and worker are currently configured with primary region FRA (Frankfurt am Main, Germany).
• Office document conversion runs with LibreOffice inside the Fly worker and is not sent to a separate cloud conversion provider. If a future tool uses a third-party document processor, that provider will be disclosed on the tool page and in this policy.
• Production traffic runs over HTTPS, and server-side downloads require a job secret or short-lived single-use grant.

Retention and deletion

• Remote worker files and completed job records are configured with a 30-minute TTL, and the worker cleanup cycle currently runs every 60 seconds.
• Single-use downloads can consume and remove output files sooner, and supported result pages include a Delete now action for immediate cleanup.
• Browser-local tools keep the core operation on the current device, so there is no server-side task file to retain for those flows.
• We avoid promising instant deletion for every edge case. If a task fails or a machine restarts, cleanup still follows the configured temporary window rather than a permanent archive.

Tool processing overview

Hosting and file location

• SentryPDF is currently hosted on Fly.io. Both the web app and worker are configured with primary region FRA (Frankfurt am Main, Germany).
• Temporary task files for server-side tools live on the worker's local disk under a temporary directory.
• The current deployment does not use a Supabase Storage bucket, object-storage bucket, or permanent file library for uploaded task files.
• Supabase is used for authentication and application data, not as the task-file store.

Access and logs

• SentryPDF is managed by a solo developer based in Germany.
• There is no public file browser for uploaded documents, and the current deployment does not include an admin file library for task files.
• Operational app logs are currently viewed through Fly.io's Logs & Errors dashboard for the running web and worker machines.
• The current code is designed to log operational events such as job status, machine ID, short reference IDs, and failure messages rather than document contents.
• We do not publish a fixed platform log-retention period here because the reviewed Fly.io dashboard material does not show a specific retention window, and retention depends on Fly.io platform settings outside the app code.

Service providers

SentryPDF currently uses the following services only for the parts of the product that require them:

• Fly.io

  Hosts the SentryPDF web app and worker in region FRA (Frankfurt am Main, Germany). Temporary server-side task files are processed on this deployment.

• Plausible Analytics

  Privacy-friendly, cookie-free page-view analytics. No personal data or cross-site tracking. Privacy policy: plausible.io/privacy

• Stripe

  Secure payment processing for credits and subscriptions. Card data is handled by Stripe and never stored on our servers. Privacy policy: stripe.com/privacy

• Resend

  Transactional email delivery for contact form messages. Only data you submit in the contact form is shared. Privacy policy: resend.com/legal/privacy-policy

• Supabase

  Authentication, sign-in sessions, account data, and billing or referral state for signed-in users. Uploaded task files are not stored in Supabase Storage in the current deployment. Privacy policy: supabase.com/privacy

Legal basis for processing (GDPR Art. 6)

• File uploads and processing: performance of the service you requested (Art. 6(1)(b)).
• Analytics (Plausible): legitimate interest in measuring service performance (Art. 6(1)(f)).
• Payments (Stripe), contact replies (Resend), and account data (Supabase): performance of contract and/or legitimate interest (Art. 6(1)(b) and (f)).

Analytics and cookies

• Plausible Analytics is cookie-free and is used for page-view measurement.
• We do not run Vercel Analytics or a third-party ad network on the current production site.
• Purchases and subscriptions are handled through Stripe when you choose a paid plan.

Payments

Payments are processed securely via Stripe. We do not store full card details on our servers.

Data controller

SentryPDF is operated independently by a solo developer based in Germany. For data-related requests, contact: support@sentrypdf.com. We aim to respond within 30 days where applicable.

Your rights

Under GDPR and applicable data protection law you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise these rights, use the contact form (select "Privacy request") or email support@sentrypdf.com directly.