Privacy

Last changed 27 September 2026.

Your documents

Some tools here never send your file anywhere. Others have to. Which is which is not a matter of opinion or of how carefully this page is worded: it is set in one configuration file, checked against the code on every build, and printed on every tool page and in the table below.

22 of the 33 tools run entirely in your browser. They open your file inside the page, work on it in your device's memory, and hand the result back to your downloads folder. We do not receive it, so there is nothing for us to keep, lose, read or be asked to hand over.

11 of them upload your file, because those tools use our server-side processing implementation. This includes document conversion, image text recognition and structured extraction. Those files are processed on our servers and deleted 24 hours later by a job that runs every fifteen minutes.

Every tool, and what happens to your file

That table is generated from the same configuration the tools themselves are built from. It cannot say one thing while a tool does another, because a build law refuses to produce the site if the two disagree.

How the browser-only claim is held up

It is a strong claim, so here is how it is enforced rather than merely stated:

• The code cannot send one. Every tool marked as running in your browser has its engine checked at build time for any way of making a network request: fetch, XHR, WebSocket, beacon, form submission. If one appears, the site does not build. That is why the count above can be trusted.
• And the reverse is checked too. A tool that does upload must say so, and must name how long the file is kept. A tool that says it uploads but has no way to send anything is also refused, because frightening people away from a tool that was private all along is its own kind of dishonesty.
• The static site has no endpoint. The pages themselves are files on a web server with no database and no route that accepts a document; it replies 405 Method Not Allowed to any request carrying a body. The tools that do upload send to a separate API on ocr.scanmydocz.com, which is the only thing here that ever receives a file.
• You can check. Open developer tools, watch the Network tab, and run a tool. On a browser tool nothing goes out. On a server tool you will see exactly one request, to the API, carrying your file. We would rather you looked than took our word for it.

What we do collect

The web server keeps ordinary access logs: the page requested, the time, the browser's user-agent string, and the requesting IP address. These are what any web server writes down in order to be operated at all, and they are kept for 14 days and then deleted. They contain URLs, never contents.

There is no analytics script on this site. No page-view counter, no heatmap, no session recorder, no A/B tool.

If you email us, we hold what you sent: your address and your words. That correspondence is kept for as long as it is useful for helping you, and it is not added to any mailing list, because we do not run one.

If you sign in, the API uses your email address and an HTTP-only session cookie to maintain the account. Your browser may also keep the signed-in email, plan display and local daily-use counter in local storage. A temporary official form can pass between pages in session storage and is removed after the receiving tool opens it. See Cookies for browser storage details.

Cookies

This site includes Google AdSense. If an ad is served, Google may use cookies or similar technology according to your region and choices. Where a consent message is shown, use its options to decide how your data may be used. The cookies page explains browser storage and links to Google's advertising controls.

Advertising does not need your document contents. Browser-only tools keep the file on your device; server tools upload it to our processing API as described above. Ads and file processing are separate requests.

Your rights

UK data protection law gives you rights over personal data an organisation holds about you: to see it, to have it corrected, and to have it deleted. Ask at help@deplyra.com and we will tell you what we hold. Browser-only work does not give us a copy of your document. Server jobs hold uploaded files for the stated processing period. We may also hold account details, support correspondence and the two weeks of server logs described here. If you are not satisfied with how we handle a request, you can complain to the Information Commissioner's Office.

The Android app is a separate thing

Scanly for Android is a separate product. Some of its features use Deplyra servers. Its own privacy policy covers app processing; this page covers this website.

Who we are

Deplyra Ltd, registered in England and Wales, company number 16688270. Registered office: 28 Hampstead Close, London, England, SE28 8EL. Our other work is at deplyra.com.

Questions, or a request about your data: help@deplyra.com.