Cookie preferences and consent

localStorage entries novus-pdf-cookie-consent and novus-pdf-cookie-preferences record your optional-cookie choices and when they were made. Short-lived first-party cookies novus-ad-region and novus-gpc record only whether the consent gate is strict/open and whether the request carried Global Privacy Control. Reset choices removes the two localStorage consent records; the cookies expire or disappear when site data is cleared.

novus-theme remembers light or dark; novus-pdf-pwa-install-dismissed remembers that you closed the install prompt; novus-pdf-blog-feedback stores a per-article yes/no answer only after you press a feedback button. None contains PDF bytes, a filename or an account identifier. Reset choices does not clear these; browser site-data controls do.

The novus-pdf-local-sessions IndexedDB database receives a PDF, filename, page count and editor layers only after Save on this device. It is never autosave and never stores passwords. The app preflights quota, writes the metadata and document atomically, reports retained size, and provides per-session deletion and Delete All. Data remains until deletion, site-data clearing or browser eviction.

After you choose a PDF on the homepage and explicitly continue, one homepage-intake record is written to novus-pdf-local-sessions. The editor reads and deletes it and rejects it after 30 minutes. It is a local transfer between pages, not an upload and not a saved recent session.

Caches same-origin application code and public assets such as HTML shells, scripts, styles and icons for offline use. It never caches document bytes, filenames or passwords because local files are not network responses. Every cross-origin request, including advertising, analytics and rotating creative hosts, is network-only. Clear site data to empty the same-origin cache.

The only analytics service on this site. It loads only after analytics consent, uses _ga-style cookies with a pseudonymous client identifier, and receives an IP address to derive approximate location. It never receives PDF bytes, filenames, passwords, page selections or editor settings. Turning analytics off also sets Google's ga-disable flag for an already-loaded tag.

Serves and measures banners, native units and rails for the current month; the retained Social Bar integration is currently disabled. It is opt-in in the EEA, United Kingdom and Switzerland and defaults on elsewhere unless you opt out. Global Privacy Control blocks it while active, including over a saved grant. Each eligible export or print may open one sponsor tab while advertising is allowed.