Ce qui reste local. Ce qui atteint PDFity. Ce qui franchit une frontiere tierce.
Cette page existe pour rendre l'argument de confiance inspectable. L'idee de base de pdfity est simple: le traitement PDF standard doit rester dans le navigateur par defaut et toute sortie de cette frontiere doit etre explicite.
What stays in-browser by default
Standard PDF processing for routine workflows such as merge, split, reorder, rotate, watermark, page numbering, and signing is designed to happen locally by default.
What pdfity still receives
Authentication data, usage counts, billing state, and operational telemetry are used to run the product, enforce limits, and support accounts.
What only happens by explicit choice
Drive imports, Dropbox saves, and Paddle checkout are optional boundary crossings triggered by the user, not silent defaults.
Ce que cela veut dire - et ne veut pas dire
It means standard processing is not upload-first by default.
It does not mean every external dependency disappears.
It means the third-party boundaries are explicit instead of hidden.
It does not replace a team's own regulatory, legal, or security review.
