Privacy

Files you upload

• Stored in a private Cloudflare R2 bucket, encrypted at rest.
• Auto-deleted within 24 hours of conversion (input + output).
• Never read by humans, never used to train models, never shared.

Account data we keep

• Email address (for sign-in and transactional email only).
• Password hashed with PBKDF2-SHA256 — we never see the plaintext.
• Subscription/billing info managed by Stripe; we store only the customer ID.
• Conversion job metadata (formats, byte sizes, timestamps) for usage accounting.

Cookies

The public site uses one localStorage entry to remember your sign-in. The admin panel uses an httpOnly session cookie. We don't set advertising or tracking cookies.

Third parties

• Cloudflare — hosting, R2 storage, request edge.
• Neon — managed Postgres for account/job metadata.
• Stripe — billing.
• Fly.io — runs the conversion worker (file processing).

Your rights

Email privacy@docforge.cc to request export or deletion of your account data. We respond within 7 days.