Privacy
Privacy & demo data
The short version: by default the LoupePDF demo keeps nothing. One optional checkbox lets you donate a file to help improve the engine. This page explains exactly what that means.
The marketing site
loupepdf.com is a static marketing site for the open-source LoupePDF viewer. We don't run third-party analytics, we don't set marketing cookies, and we don't have a sign-up flow. The contact form sends your message via Resend to our inbox and stores nothing else.
The /demo page
The demo runs the viewer in your browser. Page rendering, layer toggles, the densitometer, the TAC heatmap, and annotations all happen client-side against pdf.js — your file does not leave the page for those features.
For preflight-grade separations and TAC, the viewer can optionally
call our CodexPDF backend through /api/codex-proxy. That call
sends the PDF bytes to the backend so it can run Ghostscript-accurate
analysis and stream results back. Without the retention opt-in below,
we do not keep that PDF or those results — they're proxied through
and discarded.
The retention opt-in
A banner on the demo page lets you tick "Keep my PDF and results to help improve LoupePDF". It is off by default. If you turn it on:
- The PDF you load in the demo, and the analysis results CodexPDF produces for it, are saved to our retention store.
- We also record the request timestamp, the size and SHA-256 of the file, the User-Agent string, and a salted, truncated hash of your IP (used only to investigate abuse, not to identify you).
- Retained data is kept for up to 90 days, then automatically deleted. We may use it to debug the engine, build regression fixtures, and train internal models that improve rendering and analysis accuracy.
- Retained data is not sold, not shared with third-party ad networks, and not used to identify you.
You can change your choice any time using the small "Retention: on/off" chip in the bottom-right of the demo,
or by clearing the loupepdf-retain cookie.
Don't upload what you can't share
The demo is a public tool. Even with retention off, the PDF bytes transit our CodexPDF backend whenever the engine is enabled. Please don't load PDFs that contain confidential customer data, NDA-bound artwork, or anything you don't have the right to share. If you need to evaluate LoupePDF on sensitive content, self-host the open-source release — the repo ships everything you need.
Deletion & access requests
To ask for early deletion of anything you've donated, or for a copy of what we've retained for you, email privacy@thinkneverland.com from the address you used (or describe the upload — timestamp and approximate file name help). We'll action it within 30 days.
The product itself
LoupePDF, the open-source viewer, has no telemetry and no phone-home. When you embed it in your own stack, nothing is sent back to us. The retention behaviour described above only applies to the public demo on this marketing site.