Legal
Privacy Policy
This privacy policy applies to the DinoRexPDF website and any other domain that serves it (together, the "Service"), operated by Gladiol Studios (the "Service Provider", "we", "us"). DinoRexPDF lets you scan documents with your phone, edit PDFs in your browser, and send files directly between your own phone and computer. This policy explains what information the Service and the third-party services it uses may collect, why, and what choices you have.
The short version
- Your files never reach our servers. PDFs and scans are edited inside your browser and travel directly, encrypted, between your own devices.
- We don't ask for an account, name, email or phone number. If you write to us through the contact form, we use your email only to reply.
- Our server sees your IP address to connect your devices and to pick your language and privacy settings. We don't build profiles from it.
- We don't sell your information. Where the law requires it, optional technologies only run after you agree, and you can change your mind any time.
Your Files and Documents
- Editing happens on your device. When you open, edit, merge, compress or convert a PDF or image, the work is done by your browser. The files are not uploaded to us.
- Transfers are peer-to-peer. Files sent between your phone and computer go directly over your own network using an end-to-end encrypted WebRTC connection. Our server only helps the two devices find each other ("signaling") and never receives file contents.
- Optional encrypted relay. If a direct connection is not possible and the relay is enabled, encrypted data may pass through a relay (TURN) server. The relay forwards encrypted packets only and cannot read your files.
- Pairing check. The QR code shown on your computer contains a one-time session ID and secret used to verify that your phone connects to the right computer. These values are kept only in your browser for the session.
Your Camera and Your Connection
We want you to always know when your phone is connected and when its camera is in use.
- The camera only turns on when you ask. DinoRexPDF uses your phone's camera only after you tap a button to scan the QR code or to scan a document, and only after your browser has asked for your permission. It turns off when the scan is finished, when you close the scanner, or when you disconnect. Your browser shows its own camera indicator whenever the camera is active, and you can withdraw camera permission at any time in your browser or phone settings.
- Camera images stay on your phone. The live camera picture is never recorded or sent to us. Only the scans you choose to keep are saved on your phone, and they are sent only to the computer you paired with.
- You decide when the connection ends. While your devices are connected, both the phone and the computer show a Disconnect button. Pressing it on either device ends the connection on both devices right away, makes the phone forget the connection, and replaces the QR code on the computer with a new one, so the old code can no longer be used to reconnect.
- Connections also end by themselves. The connection ends when you close the DinoRexPDF tab on the computer, and a phone can only reconnect to the same computer for a limited time without scanning again.
- Only your own devices can connect. A phone can only connect by scanning the QR code shown on your computer's screen, and both screens show the same verification code so you can check that the right devices are connected.
Information We Collect
The Service does not require an account. When you use it, the following information may be processed automatically:
- IP address — needed to deliver the website and to connect your devices. Our server also uses it, together with an offline geolocation database, to estimate your country so that it can choose your language and show the privacy choices required in your region. The IP address is not sent to a third-party geolocation service.
- Connection details — while you pair devices, the signaling server temporarily handles a session ID and the network candidates (such as local network addresses) your browsers exchange to connect. This data is kept in memory only for the duration of the session and removed shortly after it ends (about 5 minutes after the computer leaves).
- Technical information — such as browser type, operating system, language and the pages requested, which our hosting provider may record in standard server logs for security and reliability.
- Security information — the number of connections from an IP address, kept briefly in memory to limit abuse.
- Messages you send us — if you use the contact form, the information described under Messages to Us.
The Service does not ask for your precise location. Camera access on your phone is used only to read the QR code and to scan documents; images are processed on your device.
How We Use Information
- to provide the Service, including connecting your phone and computer;
- to choose your language and show the privacy choices that apply where you are;
- to keep the Service secure, prevent abuse and fraud, and comply with legal obligations;
- to answer messages you send us;
- to measure and improve the Service, subject to your choices.
Legal bases (EEA/UK): we process data that is necessary to provide the Service and keep it secure on the basis of our legitimate interests and to perform the service you request; we answer your messages to respond to your request; and we use non-essential cookies and similar technologies only with your consent where consent is required.
Information Stored on Your Device
To work without accounts, DinoRexPDF keeps some data in your browser's local storage (localStorage, sessionStorage and IndexedDB). This data stays on your device and is not sent to us:
- your language, theme and privacy choices;
- files in your workspace on the computer, so they survive a page reload (removed after 7 days or when you delete them);
- scans on your phone that are waiting to be sent (sent scans are removed after 24 hours, unsent scans after 7 days);
- the current pairing session, so your phone can reconnect without scanning again (up to 24 hours, in that browser tab only).
You can delete this data at any time by removing files in the app or by clearing site data in your browser settings.
Cookies and Similar Technologies
DinoRexPDF's own features use the local storage described above rather than tracking cookies, and these are strictly necessary for the Service to work. We also use privacy-friendly statistics (see Analytics), which do not use cookies either. Where the law requires it (for example in the European Economic Area, the United Kingdom, Switzerland, Brazil, Canada and South Korea), optional technologies such as statistics stay off until you agree. You can review your choices at any time through Cookie settings at the bottom of every page.
Messages to Us
If you contact us through the form on the website, we receive the email address you enter, your name if you provide it, the topic and message, and basic technical details sent with it (your language setting, the approximate country estimated from your IP address, and your browser type) to help us answer. We use this information only to read and reply to your message and to keep the form free of spam. The message is delivered to our inbox through an email delivery provider (Resend) and is not used for marketing.
Analytics
To understand how many people visit DinoRexPDF and how well the website performs, we use Cloudflare Web Analytics. It does not use cookies or store anything on your device, does not follow you across other websites, and is not used to build a profile of you. It records basic, aggregated information about each visit, such as the page visited, the website that referred you, your browser, device type and approximate country, and how quickly the page loaded. It never sees the contents of your files.
Statistics only run if Statistics is allowed in your Cookie settings. In regions where consent is required, they stay off until you agree, and you can switch them off at any time.
Third-Party Services
- Render (website hosting): render.com/privacy
- Resend (delivers messages from the contact form to our inbox): resend.com/legal/privacy-policy
- Cloudflare (privacy-friendly website statistics, and an optional encrypted relay for connections that cannot be made directly): cloudflare.com/privacypolicy
Fonts and software libraries are served from our own server; the Service does not load them from third-party content networks.
Sharing of Information
We share information only with the service providers listed above so that they can host the Service, measure visits, relay connections and deliver your messages to us. We do not sell your personal information. We may also disclose information when required by law, when we believe in good faith it is necessary to protect our rights or the safety of others, to investigate fraud, or to respond to a government request.
International Data Transfers
We and our service providers may process personal data in countries outside your country of residence, including outside the European Economic Area. Where the law requires safeguards for these transfers, we rely on appropriate mechanisms such as Standard Contractual Clauses approved by the European Commission, adequacy decisions or other legally recognized mechanisms, or your consent where required and permitted.
Your Choices
- Cookie settings: change your choices at any time with the button below or the link at the bottom of every page.
- Browser settings: you can block or delete cookies and site data in your browser at any time.
- Messages: you can ask us at any time to delete a message you sent us.
Your Rights
Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, to data portability, and to withdraw consent at any time without affecting processing that happened before. To exercise these rights, contact us. You also have the right to lodge a complaint with your local data protection authority. Because DinoRexPDF has no accounts, we hold very little data that can identify you; we may ask for information such as the approximate date and time of your visit to locate it.
Your U.S. State Privacy Rights (including California)
If you live in California or another U.S. state with a comprehensive privacy law, you may have the right to know what personal information we collect, to access, correct or delete it, and not to be discriminated against for exercising these rights. We do not sell your personal information. To make a request, contact us.
How Long We Keep Data
Pairing and connection data is kept in memory only while a session is active and deleted shortly after it ends. Security counters are kept for a short time in memory. Server logs kept by our hosting provider are retained according to its policies. Messages you send us are kept for as long as needed to handle your request and for up to 24 months afterwards, unless you ask us to delete them sooner. Data stored on your device remains there until it expires as described above or you delete it.
Children
The Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from anyone under 13. If you are between 13 and the age of digital consent in your country (which can be as high as 16 in parts of the European Economic Area), please use the Service with a parent or guardian's involvement where local law requires it. If you believe a child has shared personal information with us, please contact us so we can delete it.
Security
The Service uses HTTPS, end-to-end encrypted device-to-device transfers, and verification of the paired computer through the QR code. We use reasonable technical and organizational measures to protect the data we process, but no method of transmission or storage is completely secure.
Data Breach Notification
If a data breach affects your personal data, we will notify you and the relevant authorities as required by applicable law.
Changes to This Policy
We may update this policy from time to time. When we make material changes, we will post the updated policy with a new effective date and, where the law requires it, ask for your consent again.
Contact Us
Questions about your privacy, a request about your data, or anything else about DinoRexPDF? Send us a message — we'll reply to the email address you provide as soon as we can.