Privacy
Novus PDF Studio is built around control: keep the document workflow entirely on your device, make optional data collection visible and named, and avoid account friction for standard form work.
Version 2.4 · Effective July 31, 2026 · Last updated August 25, 2026
The editor and PDF tools run in your browser. Files, passwords, page selections, signatures, transformations, and exports are never transmitted to our servers — we do not have servers that receive documents. A PDF remains in the tab unless you explicitly use a local handoff or Save on this device.
You can open the editor and work on PDFs without creating an account. Standard editing does not require us to store your document content, and we never see the files you work on.
Optional cookies, advertising and analytics are separated from essential functionality. Advertising is opt-in where the law requires it and opt-out elsewhere; analytics is opt-in everywhere. You can decline all of it and keep using every tool — no feature is locked behind consent.
We use Google Analytics (measurement, only after you opt in) and Adsterra (advertising that funds the free tools for the current month). Google Analytics is the only analytics service on this site. Neither service receives document names, document bytes, passwords, page selections, or tool settings.
Adsterra serves banners, native units, and side rails on non-legal public pages for the current month. Its tags may use cookies or similar technologies for delivery, fraud prevention, frequency control, and measurement. The Social Bar integration is retained but disabled. In the EEA, the United Kingdom and Switzerland ad tags load only after you enable advertising; elsewhere they load by default until you turn advertising off. Google AdSense remains listed in ads.txt for possible future use but its script is not loaded.
Sponsor tab on export or print.When advertising is allowed, each eligible export or print action may open one Adsterra sponsor page in a separate tab. It receives this site's origin as the referrer, never your document, file name, or editor contents. The export proceeds even if the tab is blocked or closed.
Google Analytics (property G-2YCQSFY2GV) loads only after you enable analytics in the cookie preferences. It is the only analytics or performance-measurement service on this site — we do not run Vercel Analytics, Vercel Speed Insights, or any other second measurement tag. We use it to read aggregate, page-level usage so we can improve the product; we never build user profiles from it or use it for advertising. It is not anonymous: Google Analytics stores a randomly generated client identifier in a _ga cookie so returning visits can be counted as one visitor, and Google receives your IP address in order to derive an approximate location before discarding it. Declining analytics never limits any feature, and switching it off also sets Google's own ga-disable flag so a tag that already loaded stops sending data immediately.
Third-party collection across sites. Adsterra is a third party and may process identifiers or activity across sites when it serves or measures an ad. We do not control or receive that data.
Do Not Track and Global Privacy Control. Browsers can send a Do Not Track (DNT) signal, which has no agreed meaning and which this site does not act on. We do act on the Global Privacy Control signal: while GPC is active, advertising and analytics are blocked even if a saved choice previously allowed them. The saved choice remains available underneath and may resume if you later remove the signal. Your current effective advertising status is shown on the cookies page.
Region detection.To know whether advertising may load before you have chosen, we read the country your network connection resolves to from a request header supplied by our host, and store the result as one of two values (“strict” or “open”) in a short-lived cookie. No IP address, precise location, or identifier is stored or logged by us.
Progressive Web App cache.A service worker may cache same-origin app code and static assets (pages, scripts, styles, icons) on your device so the editor and tools can open offline after a prior visit. That cache never includes PDF bytes, file names, or passwords: a local file is not a network response for the service worker to cache. Every cross-origin request, including advertising and analytics traffic and rotating creative hosts, is network-only and is never served from this cache. You can remove the same-origin cache by clearing this site's data in your browser settings.
Explicit local PDF storage.The homepage intake writes one short-lived IndexedDB handoff only after you choose a PDF and continue to the editor; the editor reads and deletes it, and rejects it after 30 minutes. Separately, Save on this device stores PDF bytes, the filename, page count and current editor layers in this browser's IndexedDB after a quota check and atomic write. It is never autosave. Saved sessions remain until you delete one, choose Delete All, clear site data, or the browser evicts non-persistent storage. Passwords are never included, and a failed save leaves the live editor unchanged.
Local article feedback and search. If you answer Was this article helpful?, the answer is stored under novus-pdf-blog-feedback in this browser and is not sent to us. Site search downloads a static public text index; the query is scored in your browser and is not sent to a search service.
Neither service is given access to the documents you edit. PDF parsing, form detection, signing, encryption, and export all execute inside your browser tab.
Controller. Novus Stream Solutions, a sole proprietorship trading as Novus Stream Solutions in London, Ontario, Canada, operates this site and decides how the limited data described above is handled. As a Canadian operator we handle personal information in line with PIPEDA and applicable Ontario law. Reach us at pdf@novusstreamsolutions.com.
What we rely on. Consent is the basis for analytics and, where the law requires prior permission, for advertising. Remembering the answer you gave, and detecting whether prior permission is required where you are connecting from, rest on our legitimate interest in honouring your choice and complying with that requirement — neither identifies you. Outside those consent-required regions — including Canada — advertising may load by default until you turn it off on the cookies page.
Your rights. Depending on where you live you may have rights of access, correction, erasure, portability, restriction, and objection over personal data. Under PIPEDA, people in Canada may request access to or correction of personal information we hold. In practice there is very little to exercise them against here: we operate no account system, no server-side document storage, and no user database, so we hold no profile to disclose, export, or delete. Everything this site stores directly sits on your own device and is listed on the cookies page. Reset choices removes the consent records; the editor deletes saved PDF sessions individually or with Delete All; clearing site data removes the rest. For anything Google holds as a result of an ad or analytics tag, use Google's own controls linked above. Write to us at the address above and we will answer within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Do not sell or share my personal information. We do not sell personal information and we receive no money for sharing it. Allowing a third-party ad network to serve interest-based ads may count as “sharing for cross-context behavioural advertising” under some US state laws. Turning the Advertising toggle off on the cookies page is how you opt out, and it is also the link this notice refers to. A Global Privacy Control signal is honoured as the same request whenever it is active.
Children. This site is a general-purpose document tool. It is not directed at children under 13, we do not knowingly collect personal information from them, and no ad served here is targeted on the basis of age. If you believe a child has provided us with personal information, contact us and we will delete anything we hold.
Changes. Material changes are published here with a new version number and date. The banner asks for consent again at least every six months regardless.
Unsaved files and all passwords are held in memory only as long as the current browser session needs them. A session you explicitly save on this device remains in local IndexedDB until deletion or browser eviction; it is never available to us. Generated download URLs and PDF document handles are released after use. Because documents never leave your device, there is nothing for us to retain, recover, or delete on a server. Questions? Contact pdf@novusstreamsolutions.com.