This is not a promise. It is architecture.
Every PDFPlug tool runs 100% in your browser using local code. When you "upload" a file, it goes from your disk into your browser's memory — it never leaves your computer. There is no upload server, no processing queue, no storage bucket with your tax return in it. We could not show your files to anyone if we wanted to, because we never receive them.
Almost nothing. When you pay, Stripe processes your payment (their privacy policy applies); we receive only a confirmation that a pass was purchased — no card numbers, ever. We do not have accounts, so there is no profile, no email list sign-up, no tracking of which files you process.
One: a local record of your 24-hour or lifetime pass, stored on your device. That's it. No advertising cookies, no analytics fingerprinting.
Your files never leave your computer. We cannot see, store, sell, or leak what we never receive.