1. Who is responsible?
PDF Craft is provided by Christopher Clements, a sole trader trading as Modenbyte, based in United Kingdom.
4 Cosford Gardens,Bicester,OX26 4FT
Email: [email protected].
We are the controller of personal information handled for PDF Craft accounts, licensing and support. This notice covers this website, the Windows application and the private test service. Paid subscriptions are not yet open to the public.
2. Your PDF documents
The desktop application processes PDFs locally. Opening, editing, measuring and saving a PDF does not upload its contents to our server. The Free reader requires no account. The application has no built-in advertising or usage analytics.
If you choose to email a file or screenshot for support, we receive what you send. Please remove information that is unnecessary for investigating your issue.
3. Information we receive and why
- Account information: your email, account identifier, a securely hashed password and sign-in sessions, used to authenticate you and protect your account.
- Licence and billing information: trial dates, access status, plan, payment and subscription identifiers, renewal or expiry information, and payment/refund status, used to provide the right features and handle billing issues.
- Support correspondence: your contact details and the information you choose to send, used to answer questions and resolve issues.
- Website and security information: network information such as IP address, request details, browser information and security/error events may be processed by our hosting and security services to deliver the website, investigate faults and prevent abuse.
We use account and licence data to perform our agreement with you or take steps you request before entering one. We have a legitimate interest in keeping the service secure, preventing repeated trial abuse, resolving support issues and keeping proportionate operational records. Where applicable, we process records to meet legal obligations. Optional information you choose to send is used for the purpose you supplied it.
You can read local PDFs without giving us account information. If you do not provide the information necessary for an account or checkout, we cannot provide those features. Licence access is updated automatically from trial and payment status; contact us if you believe a decision is wrong so we can review it.
4. Payment, website and email providers
We use Paddle for checkout and subscription administration. We send your account email and a reference that connects the purchase to your PDF Craft account. Paddle collects the checkout and payment details it needs, and sends us payment and subscription status. We do not receive or store your full payment card number or card security code. Paddle also handles information as a separate controller for its own payment, fraud-prevention and legal responsibilities: see Paddle’s Privacy Policy.
Cloudflare delivers and protects our website and its connection to our server. It processes network requests and security information: see Cloudflare’s Privacy Policy. Our email service provider processes messages sent to support. We may also disclose information where legally required or necessary to establish or defend legal claims. We do not sell your personal information.
5. Cookies and local storage
The website uses an essential account-session cookie to maintain sign-in and protect form submissions. Browser account sessions are valid for up to eight hours. Clearing cookies signs you out; blocking essential cookies may prevent account features working. We do not add advertising or analytics cookies to these pages.
Cloudflare may use security cookies, and Paddle checkout may use its own cookies or storage for payment and fraud prevention. Their notices explain their practices. The desktop app keeps preferences and, when signed in, account credentials and a signed licence cache on your computer. Signing out clears the app’s saved account session.
6. Storage, security and transfers
PDF Craft account and licence records are stored on the operator’s server. Passwords are hashed rather than kept as readable passwords. Access to administration is restricted, and connections to the public website use HTTPS. No service can guarantee absolute security.
Paddle, Cloudflare and other service providers may process information outside the UK. Their privacy notices describe processing locations and the safeguards they use, which may include adequacy decisions and approved contractual safeguards. Contact us if you need more information about providers involved in handling your request.
7. How long information is kept
Account and licence records are kept while the account is in use. After closure, retention depends on whether records are still needed to deal with a payment dispute, prevent fraud or repeated trial abuse, or meet legal obligations. Support correspondence is kept for the time needed to resolve the issue and handle related follow-up or disputes. We remove or anonymise information when it is no longer needed for those purposes.
Expired sign-in records are cleared during routine account activity; operational error logs rotate as they fill. Records may remain in restricted backups until those backups are replaced or removed. Paddle and Cloudflare have their own retention practices, described in their notices. You may contact us to request closure or deletion; closing an account and cancelling a subscription are separate actions.
8. Your choices and rights
Depending on the circumstances, you can ask for access to your information, correction, erasure, restriction, or a portable copy. You can object to processing based on legitimate interests and withdraw consent where processing relies on consent. These rights may have legal limits. We may need to confirm your identity before acting on a request.
Email [email protected] to exercise a right or raise a concern. You can complain to the UK Information Commissioner’s Office, or your local data protection authority. Contact Paddle directly for requests about information it holds in its separate role.
9. Updates
We will update this notice when the service or our practices change and provide appropriate notice of material changes. The date at the top identifies the current version.