Pdf merge iconPDFPDFPDFPDFPDF PDF Mergy

Legal

Privacy Policy

TL;DR

  • PDFs never leave your browser — merging happens entirely on your device.
  • We keep only short-lived technical logs and run no analytics or tracking pixels.
  • Google AdSense serves ads when you consent to advertising cookies, and you can change that choice at any time.

Controller & Contact

PDF Mergy is provided by w69b GmbH, Schwabstr. 41, 72108 Rottenburg, Germany. You can reach us via the contact options listed in our Impressum.

What Data We Process

  • Technical usage data. Our infrastructure stores short-lived server logs (IP address, browser information, timestamps) to operate and secure the service. Logs are automatically deleted after a brief retention period.
  • Contact information. If you email us, we process the information you provide solely to handle your request.
  • Anonymous performance metrics. We collect aggregated statistics about merge operations (for example success/error rates, processing duration, number of files and total file size) without storing any identifiers, solely to monitor and improve service reliability.

PDF Processing

PDF files are merged entirely within your browser. No PDF content, metadata, or generated documents are uploaded to our servers or shared with third parties.

Google API Services User Data

Our integration with Google Drive follows the Google API Services User Data Policy. The application accesses Google user data only when you explicitly interact with Google Drive features.

Data Accessed

  • File metadata (name, ID, MIME type, and size) for the Drive items you select while choosing PDFs to merge.
  • The binary file content of the selected PDFs so they can be combined.
  • Short-lived OAuth tokens issued by Google to authorise Drive actions. These tokens stay within your browser session and are not transmitted to our servers.

Data Usage & Processing

  • We request the drive.file scope, which allows the app to view and manage the files you explicitly choose or create with PDF Mergy, and the drive.install scope that allows to open the app with pre-selected files from the Google Drive UI directly.
  • File metadata is used solely to display the items you picked and to operate the merge workflow; we do not crawl or index any other files in your Google Drive.
  • Selected PDFs are downloaded directly to your device memory, merged locally, and never transmitted to our servers or to third parties.
  • When you save the merged result to Drive, your browser uploads the newly created PDF through the Google Drive API on your behalf. We do not log the destination folder or any other metadata about that upload.

Storage & Sharing

We do not store Google user data on our infrastructure. PDF files, metadata, and OAuth tokens remain in your browser's transient memory only for the duration of the merge operation or until you revoke access. We do not share Google user data with any third parties.

User Control

You may revoke the application's access to your Google Drive data at any time from your Google Account security settings by visiting https://myaccount.google.com/permissions.

Advertising & Cookies

We monetise the site with Google AdSense. When you consent, Google may use cookies or similar technologies to deliver and measure personalised ads. We do not deploy Google Analytics or other tracking pixels.

You can manage advertising consent via the cookie banner on your first visit or by updating your choice below:

Learn how Google uses data in advertising here.

Legal Bases

  • Article 6(1)(f) GDPR (legitimate interest) for operating the website, ensuring availability, and responding to enquiries.
  • Article 6(1)(a) GDPR (consent) for advertising cookies and personalised ads provided by Google AdSense.

Retention

Runtime metadata (for example request IP addresses) is processed by Cloudflare edge services (including Workers and CDN caching) and may be retained for up to 72 hours under Cloudflare's default diagnostic log retention.

Your Rights

You have the right to access, rectify, erase, or restrict processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also complain to your local supervisory authority.

To exercise these rights, please use the contact details provided in our Impressum.

Children

Our service is not directed at children under 16, and we do not knowingly process personal data from children. If you believe a child has provided information to us, please get in touch so we can remove it.