Privacy and Security

Your files stay on your device

Opening, editing, converting and exporting a document all happen in the browser tab, on your device. Your document is never part of a request Papr makes to the internet.

What is downloaded, and when

Two features download data the first time you use them. Neither sends your document.

• OCR language data. The first time you run OCR in a language, Papr downloads that language's data. The size is shown beside each language in the OCR dialog.
• Translation models. The first time you use a language pair, Papr downloads its model. The Translate dialog states the size, about 20 MB per language pair.

Both are kept in your browser afterwards, so the next use does not download them again. Like any request on the web, these downloads show your IP address and browser details to the server that serves them.

Contact form

The contact form sends the name, email address and message you type to Web3Forms, so that they reach us. No document you have open in Papr is part of that message.

What is stored on your device

• Your work: PDF sessions, Docs and Sheets are kept in the browser's IndexedDB, until you delete them or clear the site data.
• Small items in localStorage: your theme, the last document you opened, and a copy of unsaved changes in Docs and Sheets until the next save.

Removing details from a file you share

A PDF can carry an author name, the software that made it, its dates, scripts, attachments and hidden layers. Tick Remove hidden information in the export dialog to remove the kinds you choose from the copy you export, and Papr checks the file afterwards. Redaction removes the content under the marks you make, but not the metadata: use both when you share a document that holds sensitive details. The guide How to Remove Hidden Information and Metadata from a PDF explains each option.

Passwords

A password you set for a PDF encrypts the file with AES-256. Papr does not keep the password anywhere else. A password-protected PDF you open is stored encrypted in your browser, and it asks for the password to be opened again.