Your files never leave your device

Bullet PDF is a PDF editor that runs entirely inside your web browser. This page explains, in plain language, what that means for your documents and your data. The short version: your documents are never uploaded, there are no accounts and no cookies, the site keeps a simple log of page visits, and everything else is stored only on your own device, where you can delete it.

What happens to your PDFs

When you open a PDF (or an image) in Bullet PDF, your browser reads the file into its own memory. Everything you do with it — viewing, filling in forms, signing, annotating, editing, rearranging pages and saving — is done by JavaScript running in your browser, using the open-source libraries pdf.js and pdf-lib. When you download the result, your browser writes the new file to your device.

At no point is your document, or any part of it, sent to Bullet PDF or to anyone else. There is no server-side processing: the site consists of static files (the app itself). While a page is open it sends only a small visit ping to bulletpdf.com (see Visit log below), which never contains anything from your document. The site's Content Security Policy, which your browser enforces, forbids connections to any other origin. You can confirm this with the Network panel in your browser's developer tools, or by turning off your internet connection after the page has loaded - the editor keeps working.

No accounts or cookies

There is nothing to sign up for and no login.
The site sets no cookies.
There are no advertising or third-party scripts and no third-party resources (fonts, scripts and libraries are all served from the site itself).

Visit log

To understand how the site is used, each page visit is recorded by Bullet PDF's own server (a Cloudflare Worker). While a page is open it reports every 30 seconds that it is still open, and once when it closes. For each visit the log contains:

your IP address, and the approximate location (country, region, city, time zone) and network provider that Cloudflare estimates from it;
your browser and device type (the browser's user-agent string);
which page was open, the site that linked to it (if any), and when the visit started and ended.

A random number identifies the visit while the page is open; it is not stored on your device, so it cannot recognise you on a later visit. The log never contains anything from your documents, your signatures or your settings. It is used only to see how many people use Bullet PDF, which pages they use and for how long; it is not sold or shared, and it is not used for advertising. It is kept until it is cleared, and at most the latest 200,000 visits are kept.

What is stored on your device

To make the app useful, some things are kept in your browser's storage for this site. They stay on your device and are never transmitted.

Recent documents. The document you are working on is autosaved to the browser's IndexedDB storage so that it survives a reload and can be reopened from the start screen. This includes the PDF data and your edits.
Signatures and initials. Signatures you draw, type or upload are saved in IndexedDB so you can reuse them.
Settings. Preferences such as the theme, your author name for comments, the date format and tool options are kept in localStorage (bullet.settings.v1); the current session's document id is kept in sessionStorage.
The app itself. On the live site a service worker caches Bullet PDF's own files (scripts, styles, fonts, icons) so the app opens quickly and works offline.

How to delete it

Remove a document from the start screen with its Remove from this device button.
Delete signatures in the Signatures manager.
To remove everything at once, clear this site's data in your browser's settings (usually under Privacy or Site settings), or uninstall the app if you installed it. This also removes the cached copy of the app.

Hosting

The static files that make up Bullet PDF are served by a content delivery network (Cloudflare). Like any web host, it may keep standard, short-lived server logs of requests for those files (for example the requesting IP address, time and file name) for security and operational purposes. It never receives your documents, because they are never sent.

Children

Bullet PDF does not ask for or knowingly collect personal information from children. The only information recorded about any visitor is the visit log described above.

Changes

If this policy changes, the new version will be published on this page with an updated date. Since the app has no way to contact you, please check back if it matters to you.