PRIVACY ARCHITECTURE

Your Documents Never Leave Your Device

komopdf was built from the ground up on local-first principles. We do not operate document storage servers, cloud synchronization databases, or behavioral tracking pipelines.

No Document Uploads

When you open a PDF in komopdf—whether using the browser Web edition or a native desktop package—the file is read directly from your local filesystem into browser WebAssembly memory or the native worker process.

Raw PDF bytes are never transmitted to our web servers, CDNs, or any third-party storage infrastructure. Saving a document writes directly back to your local disk or browser download directory.

AI Gateway Data Handling

Optional AI capabilities provided by komo communicate with our stateless gateway proxy at komopdf.com/api/agent.

Only the explicitly selected text passage, user prompt, or bounded image segment required to satisfy your request is sent to the model upstream. The gateway does not retain prompt or document text on disk, and Nginx access logging for AI endpoints is explicitly disabled.

Password & Key Security

When opening encrypted PDF files or applying AES-256 password protection, all cryptographic operations are performed locally by the bundled QPDF engine.

Passwords, encryption keys, and unencrypted document buffers remain strictly in local RAM and are cleared when the tab or application session is closed.

Zero Telemetry & Trackers

komopdf employs no advertising networks, marketing pixels, or third-party analytics trackers (such as Google Analytics or Meta Pixel).

We do not set tracking cookies. Server logs record only standard network connection metadata (IP address, HTTP method, status code) strictly for operational rate-limiting and DDoS mitigation, with automatic 7-day log rotation.

Local Storage & Cache

Browser Web edition uses client-side IndexedDB solely to cache font metrics and provide transient crash recovery for active editing sessions. You can clear this cache at any time via browser settings.

Desktop editions maintain document state in isolated per-file workspace directories. Closing a document or quitting the application preserves your generated files without automatic deletion.

Voluntary Support & Accounts

komopdf requires no user registration, email sign-up, subscription tiers, or credit card collection.

If you choose to support ongoing maintenance through voluntary donation platforms (such as Ko-fi), any transaction is handled directly on that platform and no financial records are stored by komopdf.

Policy effective date: September 22, 2026. Address inquiries to: security@komopdf.com