Privacy

Last changed 4 August 2026.

Your documents

Your document never leaves your browser. Every tool on this site opens your file inside the page, works on it in your device's memory, and hands the result back to your downloads folder. We do not receive it, so there is nothing for us to keep, lose, read or be asked to hand over.

That is a strong claim, so here is how it is held up rather than merely stated:

• There is no endpoint. This site is static files on a web server. It has no database and no route that accepts a document. The server replies 405 Method Not Allowed to any request carrying a body, and a check on every deploy fails if that stops being true.
• The code cannot send one. Each tool's engine is checked at build time for any way of making a network request — fetch, XHR, WebSocket, beacon, form submission. If one appears, the site does not build.
• Your browser is instructed to refuse. The pages carry a Content-Security-Policy that allows connections to this site only and forbids form submission entirely. A bug, or a library misbehaving, would be stopped by the browser rather than by our good intentions.
• You can check. Open developer tools, watch the Network tab, and run a scan. Nothing goes out.

What we do collect

The web server keeps ordinary access logs: the page requested, the time, the browser's user-agent string, and the requesting IP address. These are what any web server writes down in order to be operated at all, and they are kept for 14 days and then deleted. They contain URLs, never contents.

There is no analytics script on this site. No page-view counter, no heatmap, no session recorder, no A/B tool.

Cookies

This site shows advertising, and advertising sets cookies. They are set by Google when an ad loads, as soon as a page opens. Visitors in the UK and the EU are shown Google's own consent message, and their answer governs what those cookies do. The cookies page sets out what is involved and how to limit it.

None of this touches the documents you open in the tools. Those are not sent to us, to Google, or to anyone — the same three things hold them up whether ads are running or not.

The Android app is a separate thing

Scanly for Android has an account, stores your scans on the phone, and talks to our servers for the parts that need it. What it does with your data is described in the app's own privacy policy, which is linked from inside the app. This page covers this website only.

Who we are

Deplyra Ltd, registered in England & Wales.

Questions, or a request about your data: help@deplyra.com.

Company number and registered office are printed here as soon as the incorporation paperwork is to hand. They are blank rather than invented.