Privacy

Last changed 17 August 2026.

Your documents

Your document never leaves your browser. Every tool on this site opens your file inside the page, works on it in your device's memory, and hands the result back to your downloads folder. We do not receive it, so there is nothing for us to keep, lose, read or be asked to hand over.

That is a strong claim, so here is how it is held up rather than merely stated:

• There is no endpoint. This site is static files on a web server. It has no database and no route that accepts a document. The server replies 405 Method Not Allowed to any request carrying a body, and a check on every deploy fails if that stops being true.
• The code cannot send one. Each tool's engine is checked at build time for any way of making a network request: fetch, XHR, WebSocket, beacon, form submission. If one appears, the site does not build.
• Your browser is instructed to refuse. The pages carry a Content-Security-Policy that allows connections to this site only and forbids form submission entirely. A bug, or a library misbehaving, would be stopped by the browser rather than by our good intentions.
• You can check. Open developer tools, watch the Network tab, and run a scan. Nothing goes out.

What we do collect

The web server keeps ordinary access logs: the page requested, the time, the browser's user-agent string, and the requesting IP address. These are what any web server writes down in order to be operated at all, and they are kept for 14 days and then deleted. They contain URLs, never contents.

There is no analytics script on this site. No page-view counter, no heatmap, no session recorder, no A/B tool.

If you email us, we hold what you sent: your address and your words. That correspondence is kept for as long as it is useful for helping you, and it is not added to any mailing list, because we do not run one.

Cookies

This site currently sets no cookies at all, and loads nothing that would set one. There is therefore no consent banner, because a banner asking permission for something that does not happen is theatre.

Advertising is planned, and when it arrives it will bring cookies with it. The banner will appear in the same release, before the first ad loads, not after. The cookies page describes what that will be.

Your rights

UK data protection law gives you rights over personal data an organisation holds about you: to see it, to have it corrected, and to have it deleted. Ask at help@scanmydocz.com and you will get a straight answer. For the documents you process on this site, that answer will be that we hold nothing, because nothing was ever sent to us. For email correspondence and the two weeks of server logs, we will tell you exactly what exists. If you are not satisfied with how we handle a request, you can complain to the Information Commissioner's Office.

The Android app is a separate thing

scanmydocz for Android has an account, stores your scans on the phone, and talks to our servers for the parts that need it. What it does with your data is described in the app's own privacy policy, which is linked from inside the app. This page covers this website only.

Who we are

. Our other work is at deplyra.com.

Questions, or a request about your data: help@scanmydocz.com.

Company number and registered office are printed here as soon as the incorporation paperwork is to hand. They are blank rather than invented.