Privacy Policy

01 Overview

Folio PDF Studio ("Folio", "we", "us") is a Chrome browser extension that lets you edit, sign, convert and transform PDF documents directly in your browser.

This Privacy Policy explains what limited data we do collect (solely for billing purposes) and how it is handled.

02 Data we collect

We collect the absolute minimum required to operate the pay-per-use billing system:

• An anonymous user ID generated randomly in your browser — this is not linked to your name, email, Google account or any personal identifier.
• A credit counter (how many editing sessions you have purchased and used).
• A boolean flag indicating whether your one free trial session has been used.
• Stripe payment metadata (see Section 5) — only when you make a purchase.

03 Data we do NOT collect

We explicitly do not collect, transmit or store any of the following:

• The contents of your PDF files — they are never uploaded anywhere.
• Your name, email address or any personally identifiable information.
• Your IP address beyond what Stripe and Vercel (our infrastructure) log automatically.
• Your browser history, browsing behaviour or the websites you visit.
• Any analytics, telemetry or usage events beyond credit consumption.
• Cookies — we use no cookies.

04 Local storage

The extension uses Chrome's chrome.storage.local API to store the following data only on your device:

• Your anonymous user ID (folioUID).
• Temporary session data for your current PDF (raw bytes, modifications, signatures) — cleared when you load a new file.
• Your selected format preferences.

None of this data is synced to Chrome Sync or transmitted to any external server, with the sole exception of your anonymous UID which is sent to our backend when you interact with the editor (to check and decrement your credit balance).

05 Payments & Stripe

Payment processing is handled entirely by Stripe, Inc., a certified PCI-DSS Level 1 payment processor. We never see or store your card number, billing address or any payment instrument details.

When you purchase a credit pack, Stripe shares with us only:

• The anonymous user ID you sent when initiating the checkout (stored in Stripe's session metadata).
• The number of credits purchased.
• The payment status (succeeded / failed).

Stripe's own privacy policy governs how Stripe handles your payment data: stripe.com/privacy.

06 Backend database (Supabase)

Our backend API is hosted on Vercel (EU region) and uses Supabase as a database to store your credit balance. The database contains a single record per anonymous user ID:

• uid — a randomly generated string like u_lxyz_abc123
• credits — integer, number of sessions remaining
• free_used — boolean

There is no way to reverse-engineer your real identity from this data. Supabase privacy policy: supabase.com/privacy.

07 Third-party services

The only external services Folio communicates with are:

• Vercel — hosts the backend API. May log IP addresses in server access logs for up to 30 days.
• Stripe — processes payments. Governed by Stripe's own privacy policy.
• Supabase — stores credit balances. Data stored in EU (Frankfurt).
• Google Fonts — loaded on our website (index.html) only, not inside the extension.

We do not use any advertising networks, analytics platforms (Google Analytics, Mixpanel, etc.) or social media tracking pixels.

08 Your rights

You have the right to:

• Access — request a copy of the data we hold about your anonymous UID.
• Deletion — request deletion of your anonymous UID and associated credit balance at any time. Note: this permanently removes unused credits with no refund.
• Portability — receive your credit balance data in a machine-readable format.

To exercise any of these rights, contact us with your anonymous UID (visible in the browser console by typing Payment.getUID() in the Folio editor).

09 Children's privacy

Folio PDF Studio is not directed at children under 13 years of age. We do not knowingly collect any data from children. If you believe a child has used our paid service, contact us and we will promptly delete any associated data.

10 Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the extension after changes constitutes acceptance of the updated policy.

11 Contact

For any privacy-related questions or data requests, please contact us at: