Privacy & processing
Your content should not travel without a reason.
Every Unidec tool declares its processing model before you provide content. Most tools run entirely on-device; Quick Share and Quick Paste are the clearly marked encrypted-upload exceptions.
On-device tools by default
All available tools except Quick Share and Quick Paste process selected content on your device. Working files and generated download URLs are temporary unless a tool explicitly offers local autosave and you allow it; Sketch Essentials may save its editable document, including inserted images, in this browser. Camera scanning begins only after permission and stops when a QR code is found, you stop it, or the page closes.
Password & Security Essentials uses the browser’s cryptographic random generator. Generated values remain only in the current page state and are never automatically copied, saved to local storage, or included in a network request.
Calculator Essentials evaluates expressions and everyday formulas entirely in the current page. Its temporary history is not saved and is cleared when the tab closes or the page refreshes.
Metadata & Privacy Cleaner inspects and rewrites supported JPEG, PNG, WebP, and PDF files in browser memory. Image metadata blocks are removed without recompressing visible pixels, color profiles are preserved, and content credentials are preserved unless explicitly selected for removal. Signed PDFs are not rewritten.
Screen Capture Essentials requests display and optional microphone access only after you press start. The browser controls the source picker and sharing indicator. Captured frames and recording chunks remain in the current tab; active tracks stop on completion, cancellation, or page exit.
CSV & JSON Essentials parses, profiles, transforms, and exports structured text in browser memory. Selected files and pasted values are not uploaded or persisted. Spreadsheet-formula protection changes exports only when you enable it.
Color & Design Essentials converts and generates colors in page memory. Uploaded images are decoded locally for pixel sampling and palette extraction. The optional eyedropper opens only after a button press and is controlled by the browser.
PDF Essentials merges, splits, extracts, rotates, and compresses PDFs in browser memory. Compression rebuilds pages as JPEG images, which flattens selectable text, links, forms, and annotations in the downloaded copy. Source files are not uploaded.
PDF Fill & Sign renders and edits PDFs in browser memory. Visible signatures are flattened into the downloaded copy; they are not identity-verified or certificate-backed digital signatures.
Browser storage
The local-preferences choice controls only storage in this browser. One necessary entry remembers that choice. If you save local preferences, Unidec also stores your theme, language, pinned and recent tools, recent conversions, and sketch autosave in this browser. “Keep preferences off” removes and disables those optional entries. You can change this at any time through Privacy settings in the footer.
Video engine download
Video Essentials downloads a pinned WebAssembly media engine from jsDelivr when it is first used. This is a normal program-file request; the selected video is not included or sent to that provider. The interface discloses this download before file selection.
OCR language model download
Document Scanner & OCR downloads the chosen English or German recognition model when it is first used. The request contains only program and language-model files; selected images remain in browser memory. The interface discloses this before image selection.
Quick Share encrypted uploads
Quick Share accepts one file up to the limit shown in the tool. The browser encrypts the file, filename, and media type with AES-GCM before upload. Only encrypted bytes are uploaded to a private Vercel Blob store; the decryption key is placed in the URL fragment after “#” and is not sent to Unidec, Vercel Blob, or Analytics. The recipient downloads the encrypted file and decrypts it locally. A link can remain available for 15 minutes, 1 hour, 5 hours, or 24 hours. Access ends at the selected expiry, a delayed deletion job removes the encrypted object, and a daily cleanup handles abandoned or missed jobs. The sender can also delete it immediately. Because Unidec cannot inspect encrypted content, recipients should open files only from people they trust.
Quick Paste encrypted uploads
Quick Paste accepts up to 512 KB of text or code. The browser encrypts the content, text or code mode, and detected language before upload. Only encrypted bytes are uploaded to the same private temporary store used by Quick Share, while the key remains in the URL fragment. Links last 15 minutes, 1 hour, 5 hours, or 24 hours. If “delete after first successful opening” is enabled, the recipient browser requests deletion immediately after it decrypts the paste; the normal expiry remains the fallback if that request cannot be completed. The decrypted browser copy remains available to that recipient.
Upload security and service data
Quick Share and Quick Paste use Vercel BotID Basic and platform rate limiting to reduce automated upload abuse. The service necessarily processes an opaque share token, encrypted payload size, selected retention period, IP-derived security signals, and technical request logs. When a recipient opens a shared-content link, Unidec uses the two-letter country code supplied by Vercel to show German in Germany and English everywhere else. This makes no separate location request and uses no precise coordinates. The service does not receive the decryption key, original filename, original media type, readable file contents, pasted text, or code language. Uploaded ciphertext is used only to provide the requested temporary transfer and enforce security and acceptable-use rules.
Future server tools
Future server-backed tools are not presented as live until their processing, deletion, security, and acceptable-use rules are defined. Each tool must state its processing model before file selection.
What local tools still expose
Your browser and device still know which files you select. Browser extensions, operating-system software, and downloaded files remain outside Unidec’s control. Use a trusted, up-to-date browser for sensitive material.
Anonymous analytics
Unidec uses Vercel Web Analytics to count page views, client-side route changes, and aggregate PDF action outcomes such as started, successful, or failed. Vercel states that Web Analytics uses no cookies, stores anonymized aggregate data, does not associate events with an individual or IP address, and resets its visitor hash each day. A data point may include the timestamp, page URL and route, referrer, filtered query parameters, approximate location, operating system, browser, device type, PDF action name, and outcome. Unidec removes URL fragments and replaces unique Quick Share and Quick Paste addresses with generic shared-content routes before transmission. Share keys, filenames, file sizes, file contents, pasted or searched text, generated values, and tool outputs are not sent as analytics properties.