Privacy Policy

Last updated: 17 July 2026

PDF Form Filler is designed so that I hold as little of your information as possible. This policy explains what little I do process, and your rights.

Your forms never leave your device

All PDF processing, including field detection, filling, signature placement and flattening, happens locally in your web browser. The forms you upload are not sent to me or to anyone else. There is no server that receives them, and I cannot see them. Field values saved with the Save as JSON feature are stored as a file on your own device.

Saved profiles

Saved profiles are reusable sets of field values that you name and can load into any form. Without an account, your profiles are stored only in your browser's local storage, on your own device, and never sent anywhere.

The purpose of an account is to sync your saved profiles across your devices. If you sign in, your profiles are also stored in Google Cloud Firestore under your account, so you can use them on your other devices. Because a profile can contain the field values you chose to save, please avoid saving another person's personal data in a profile that you sync. You can delete any profile from within the tool, which removes it from both your device and your synced copy.

Your account

You do not need an account to use the tool. If you choose to create a free account and sign in, I process:

your email address and a password (held by my authentication provider, Google Firebase Authentication; I never see your password);
the saved profiles you choose to sync (stored in Google Cloud Firestore under your account).

I use this information only to operate your account and to sync your saved profiles. You can ask me to delete your account at any time by emailing the address below. I do not use analytics, advertising or tracking cookies.

Who I am

The data controller is Sarah Okafor, practising barrister in England and Wales, trading as Chambers of Sarah Okafor. ICO registration: ZA226741. Contact: [email protected].

Legal basis and retention

I process account data, including any saved profiles you sync, because it is necessary to provide the service you asked for (UK GDPR Article 6(1)(b)). This data is kept until you delete the profile or ask me to delete your account. I keep no copies of your forms at any time.

Where data is processed

Account data and any saved profiles you sync are processed by Google Firebase and Google Cloud Firestore, which may store them outside the UK. Google provides appropriate safeguards recognised under UK GDPR for such transfers.

Your rights

You have the rights under UK GDPR to access, correct, delete and port your account data, to object to or restrict processing, and to withdraw consent. You may also complain to the Information Commissioner's Office (ico.org.uk). To exercise any right, email me at the address above.