How ScanPDF Handles Your Information

ScanPDF provides file conversion utilities, document manipulation features, media tools, dynamic QR code management, and short-link redirection. The information processed depends directly on the specific tool or service you utilize:

Information You Directly Provide

• Uploaded Files: Documents (e.g. PDF, Word .docx, PowerPoint .pptx, Excel .xlsx), images (PNG, JPEG, WebP, SVG), audio tracks, or video files submitted to conversion, compression, cropping, watermark, or OCR tools.
• Account Credentials: Username, email address, and cryptographically hashed password supplied when registering an optional account for dynamic QR codes and short URLs.
• Link and QR Configuration: Destination URLs, custom aliases, custom headers, QR design choices (colors, styles, error correction), and uploaded branding logo images.
• Inquiries & Messages: Name, email address, optional telephone number, issue category, subject line, and detailed message body submitted through our Contact or Help desks.

Information Automatically Generated or Collected

• Technical Network Metadata: Internet Protocol (IP) address, HTTP referrer URL, user-agent string (identifying browser and operating system version), and request timestamps.
• Session & CSRF State: Secure session identifiers and Cross-Site Request Forgery (CSRF) tokens necessary to safeguard form submissions and authenticated sessions.
• Link Redirect & Scan Events: Access timestamps, approximate geographic regions derived via IP lookup, device type (mobile, tablet, desktop), referring source, and consent-based GPS coordinates if explicitly enabled.
• Usage & Performance Telemetry: Aggregated page view metrics and visitor interactions collected via Google Analytics (GA4) to evaluate service reliability and navigation flow.

ScanPDF does NOT make false blanket claims that "all files never leave your computer." Instead, we clearly distinguish between our two operational models:

Additionally, companion utilities such as the standalone Invoice Generator at https://invoice.scanpdf.co.in/ operate as client-focused web tools allowing instant local generation and printing of invoice documents.

ScanPDF provides dynamic QR code generation and short URL redirection. Unlike temporary file conversion, dynamic links inherently require persistent database records to route visitors to their configured destinations:

• Link Attributes: Destination URL, short code identifier (e.g., 8-character token), custom alias (if configured), and custom header path segments.
• QR Visual Customization: Color palettes (foreground and background hex codes), body style, eye shape, ball shape, and error correction levels.
• Uploaded Branding Assets: If you attach a company logo or background image to a dynamic QR code, that image file is stored in our media directory to generate the rendered QR code graphic.
• Access Restrictions: If a creator configures password protection or expiration timestamps, the hashed access password and expiration date are stored to enforce authorization upon redirect.
• Payload Types: Non-URL dynamic QR types (such as vCard contacts, Wi-Fi configuration details, event schedules, or text payloads) store structured JSON fields required to construct the QR code payload.

ScanPDF treats geographic data with strict technical precision. We maintain a clear boundary between approximate network geolocation and precise physical GPS coordinates:

1. Standard Network Geolocation (GeoIP)

For all standard short links and dynamic QR codes, our server performs an approximate IP-based lookup using an external GeoIP service provider (ipwhois.app). This provides country, region, and city approximations based on internet service provider routing. It does not access your device's physical sensors or precise coordinates.

2. Optional Permission-Based GPS Verification

Short-link creators may optionally enable a "Require GPS" setting for specialized workflows (such as authorized check-ins or localized access). When this feature is active:

• The redirect page pauses before forwarding and displays a notification indicating that location verification is requested.
• Your web browser or mobile operating system displays its standard, native permission prompt asking: "Allow ScanPDF to access your location?"
• If you grant permission: The browser transmits latitude, longitude, and accuracy radius to our server, where it is recorded alongside the scan timestamp.
• If you decline or deny permission: No GPS coordinates are recorded. Our server logs a permission outcome of gps_denied or unavailable, and the redirect proceeds or halts according to the creator's link rules.

Cookies are compact text files stored on your device to support core technical functions, maintain session state, and deliver analytics:

• Essential Session Cookies (sessionid): Maintained by Django to preserve your authenticated login state while navigating the dynamic QR dashboard and short-link management pages.
• Security CSRF Cookies (csrftoken): Required to validate form submissions and defend against Cross-Site Request Forgery attacks.
• Local Browser Storage: Used by client-side browser tools (such as UI preferences and draft form states) within your browser without transmitting data to our servers.
• Third-Party Cookies: Set by our integrated analytics and advertising partners (Google Analytics and Google AdSense) to measure traffic and serve relevant ads.

You can configure your browser to reject or delete cookies. Note that disabling essential session cookies will prevent account login and dashboard features from functioning.

We partner with Google AdSense (Publisher ID: ca-pub-9024238607769692) to deliver online advertisements across public pages of ScanPDF. Advertising revenue enables us to provide our file conversion tools and utilities at no charge.

Google and third-party advertising vendors utilize cookies and device identifiers to serve advertisements based on your prior visits to ScanPDF and other websites on the internet.

You may manage personalized advertising settings or opt out of personalized interest-based advertising by visiting Google Ads Settings.

ScanPDF's short URL redirection service forwards visitors to destination websites specified by link creators. Once you leave the scanpdf.co.in domain, our Privacy Policy no longer applies.

External third-party destinations have their own privacy practices and data collection standards. ScanPDF exercises no operational control over external websites, and we encourage users to review the privacy notices of any destination they visit.

ScanPDF implements technical and administrative measures appropriate to the nature of our file utilities:

• Encryption in Transit: All HTTP communications between your browser and our servers are encrypted using Transport Layer Security (TLS / HTTPS).
• Cryptographic Password Protection: Account passwords are stored exclusively as salted, one-way cryptographic hashes.
• File Path Isolation: Temporary files use randomized UUIDs to ensure different user uploads cannot collide or be enumerated.
• Cross-Site Protections: Enforced CSRF tokens defend form submissions against malicious cross-origin forgery.

ScanPDF provides general-purpose file utilities designed for students, professionals, and general web users. We do not intentionally solicit or collect personal information from children under the age of 13.

If you believe a minor under 13 has provided personal details through our optional registration or contact forms without parental consent, please contact our support desk so we can investigate and remove the relevant records.

If you have questions, feedback, or concerns regarding ScanPDF's privacy practices, data handling, or technical safeguards, please submit an inquiry directly through our customer support desk: