Privacy Policy

Documents you choose

PDF bytes, filenames, page dimensions, page rotation, document metadata, selection, and page order are handled in browser memory after you explicitly add a file. They are not intentionally sent to an application API, account, analytics service, URL, cookie, or server database by this application.

Thumbnails, checks, and finished files

Bounded thumbnails, low-resolution visual fingerprints, generated PDF bytes, ZIP entries, and Output Check results remain in this tab. They are released when you remove files, clear the workspace, leave the page, or close the tab. Reloading starts with an empty workspace.

No document history in browser storage

Mallow PDF does not use localStorage, sessionStorage, IndexedDB, cookies, or URL parameters to remember a document, filename, page thumbnail, page order, selection, output, or download history. The first version does not persist tool preferences.

Application assets and local processing

Scripts, styles, fonts, illustrations, PDF readers, PDF writers, and worker code may be requested as same-origin application assets. File inspection, thumbnailing, arranging, output generation, verification, and download run in your browser. The application does not request camera, microphone, contacts, location, payment, USB, serial-device, or cloud-storage permission.

Documents the editor leaves unchanged

Mallow PDF rejects protected, signed, interactive, annotated, bookmarked, tagged, layered, attachment-bearing, active-content, custom-page-label, and complex catalog or page structures when ordinary page rewriting might discard important behavior or relationships. The original file remains on your device. You can flatten a separate local copy or choose an ordinary PDF before adding it again.

Page removal reorganizes visible pages; it is not redaction or forensic sanitization. Do not use it to remove confidential content.

Hosting and technical requests

The service host may process routine request information such as an IP address, user agent, requested application URL, request time, and security logs to deliver and protect the site. Document bytes and filenames are not intentionally added to those requests. There is currently no first-party analytics tracker, application account, application database, or application cookie.

Advertising status

Production builds include a non-executable Google AdSense account meta tag solely for site-ownership verification. There are currently no AdSense execution scripts, manual ad units, Auto ads, advertising cookies, or consent-management platform in this application. This policy and interface will be updated before that behavior changes.

Questions and changes

Email gensio.support@gmail.com for a privacy question. This inbox is shared with Gensio, but MallowDesk inquiries are handled separately. Never attach a confidential document to a support message.