Privacy Policy

1. Controller

TrackPDF is operated by EVELCON LTD, a UK limited company (Company Number: 12860639). The Company is registered with the UK ICO and supported by a registered Data Protection Officer. Further details available on request - please contact: [email protected].

EVELCON LTD acts as data controller for service operations and a processor for PDF contents handled on your instructions. This split limits our use of your content and clarifies your responsibility for what you upload.

2. Data Collected

Upload:

PDF file and contents, minimal metadata, generated tokens, IP addresses used for basic security and rate limiting, anti-abuse verification data (e.g., Turnstile responses).

Viewing:

Page views and navigation events, approximate time spent, general device/browser information, referrer when provided, token/link used, IP-derived signals for security, and server logs. We do not use analytics cookies for advertising.

Limited client-side storage may be used for temporary UI state; it is not used to profile or advertise.

3. Purpose & Legal Basis

Hosting & delivery: Performance of a contract (providing the upload and viewing service).
Analytics for uploaders: Legitimate interests balanced against viewer expectations; uploaders must ensure lawful grounds for their audience.
Security & abuse prevention: Legitimate interests (rate limiting, fraud prevention, integrity of tokens).
Consent: Used only where optional features require it for EU/UK users.

4. Data Processing

Your data is processed on trusted cloud infrastructure with appropriate safeguards. Cloudflare supports delivery, storage, and security; see their GDPR resources at cloudflare.com/gdpr. Analytics: Only holders of the admin link can view analytics for a PDF. We do not sell or share analytics with third parties.

5. Retention

Free: PDFs and associated analytics are typically deleted after about 3 days.
Paid/extended: Longer retention may be available as a service feature; durations are shown in-app when you extend.
Logs and security data: Kept for a limited period for security and reliability, then removed. Exact windows may change to meet operational needs.

6. Security

Tokenised access, HTTPS/TLS encryption, rate limiting, anti-abuse verification, and automatic deletion windows. Links are bearer secrets; anyone with the link can access. Do not upload sensitive or regulated data unless you have a lawful basis and appropriate safeguards.

Note: Links act as passwords. Treat them securely.

7. Viewer Notice

When you open a shared link, basic viewing analytics are collected for the uploader. By continuing, you acknowledge this and can review this policy at any time.

8. Your Rights (GDPR/UK GDPR)

You have the right to:

• Access: Request a copy of data associated with your token
• Deletion: Request immediate deletion of your PDF and analytics
• Rectification: Correct inaccurate data (re-upload if needed)
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a structured format
• Complaint: Lodge a complaint with your data protection authority

How to exercise rights: Email [email protected] with the share or admin token and the email you used for purchase (if applicable). We may ask for additional verification to avoid unauthorized access. For non-paying users whose files have already expired, we may have minimal or no remaining data after the standard deletion window.

9. Cookies and Tracking

We do not use analytics cookies or identifiers to serve ads. Analytics are collected server-side through necessary API calls. Limited client storage (e.g., session storage) may be used for transient UI needs and not for advertising profiles.

10. Children

This service is intended for individuals 18 and older. Do not upload content about minors unless you have lawful grounds and permissions.

11. International Data Handling

Our provider may route data globally. Safeguards such as standard contractual clauses and equivalent measures apply as relevant.

12. Changes to This Policy

We may update this policy to reflect service changes or legal requirements. Material changes will be posted with an updated "Last updated" date.

13. Contact Us

For privacy questions, data requests, or concerns, please contact us at [email protected].