PubliposterWhat Publiposter does with your data
The promise is one sentence. This page sets out what it covers, and more usefully, how to check it rather than take our word for it.
What happens when you open a file
The PDF and the spreadsheet are read by your browser, on your machine. They are parsed there, displayed there, merged there, and the finished documents are assembled there before you save them.
There is no address these files could be sent to. That is not a setting or an internal policy. The service has no server side capable of receiving a document. So there is nothing to switch off, and nothing to ask us to delete.
How to check it yourself
This is the part that matters. A claim you cannot verify is worth no more than the advertising it replaces. There are two checks, and anyone can do them.
Disconnect. Load the page, turn off your wifi, then run a complete merge: open the PDF, import the spreadsheet, generate, download. It all works. A tool that was sending your files somewhere would stop here.
Open the network tab. Press F12, choose Network, then reload and use one of the tools. You will see the page and its files arrive, and then nothing.
The browser also enforces a rule we hand it, called a Content Security Policy. It forbids the page any connection to a domain other than its own and refuses to load any script from elsewhere. If we introduced such a request by mistake, it would be blocked.
What is kept, and where
Your saved templates, the PDFs they are based on and any fonts you added are held in the storage your browser sets aside for this site, on your machine. Nothing is synced anywhere.
To erase all of it, clear site data for this domain in your browser settings, or delete templates one at a time from the home page.
Cookies and analytics
No cookies are set. There is no account, no session, and nothing to remember between visits.
No analytics script is included in the pages. A script of that kind would see your file names, your column headings and your cell contents, which is incompatible with everything above.
No font, image or script is loaded from another site. Everything is served from this domain, which is also why the tools keep working with no connection.
What the host sees
Somebody has to send you the page. As with any website, our host sees the requests asking for it: IP address, time, which file, and the kind of browser. That is inherent to how the web works, it serves security and abuse prevention, and it is not used to track you.
What it does not see: your files, their names, your columns, your data. None of it ever reaches the host.
Links off the site
A few links leave the site, to official form publishers and to a support page. They are links: nothing loads until you click, and clicking takes you to a third-party site with its own rules.
In GDPR terms
We collect no personal data through use of the tools, since none reaches us. The only data processed is in the host’s technical logs, described above. There is no profiling, no sharing with third parties and no sale, and no consent banner to show, since there is nothing to consent to.
See the toolsPage last revised