Privacy Policy

Last updated: October 05, 2026

This policy explains what information pdfbookmarks.xyz ("the site", "we") collects when you use it, how we use it, who we share it with, how long we keep it, and how you can manage it.

1. What happens in your browser

We process PDFs in your browser whenever possible: reading the file, showing previews and thumbnails, on-device recognition of the outline, and generating the bookmarked PDF all run on your device. Your PDF file as a whole is not uploaded.

Exception: if your browser is too old to process the file locally, the PDF is uploaded to our server for processing (it is deleted on the schedule in section 6).

2. What is uploaded to our server

AI outline recognition: the contents pages you select (rendered as images, or those pages extracted from the PDF) are uploaded to our server and sent to an AI recognition provider (see section 5) to read the text. Only the pages you select are uploaded.
Workspace: the recognized or edited outline and settings such as contents pages and first body page are stored on the server so you can continue editing later.
File identifiers: the PDF's SHA-256 hash, page count, file size, and embedded metadata such as title and author, used to recognize the same file and suggest existing outlines from the library. The file's contents cannot be recovered from these values.
Sharing to the library (optional): if you tick "Upload the outline to the library when generating", the outline enters the public library where other users can see and use it. If the book has no cover yet, a small thumbnail of the PDF's first page is shown publicly as its cover. Titles you propose, corrections and ratings also go into the library. If you leave it unticked, nothing is added to the library and no cover is uploaded.

3. Account and points

Sign-up details: email address and password (only a hash is stored). If you sign in with Google, we receive your Google account ID, email, name and profile picture URL.
Points: your balance and each change (top-ups, spending, refunds, rewards) with the related book. Top-ups are currently credited manually by an administrator, recording the amount and a note.
Email: confirmation and password-reset emails are sent through an email delivery provider.

4. Cookies, device recognition and logs

Cookies: used to keep you signed in (including "remember me"), protect against cross-site request forgery, and, once you agree, give signed-out visitors a random visitor ID (see the next item). Browser local storage only holds interface preferences such as recognition method and quality. We do not use advertising or third-party analytics trackers.
Device recognition: signed-out visitors can use library outlines for a limited number of books (3 per device). To enforce this, only after you choose to use an outline from the library and agree in the confirmation dialog do we store a visitor cookie on your device and record the visitor ID, IP address, and a hash computed from device characteristics such as screen size, time zone, language and graphics hardware (a device fingerprint). Nothing is recorded while you just browse or preview outlines, and nothing is stored if you cancel the dialog. These are used only to enforce the limit and prevent abuse. No device fingerprint is recorded for signed-in users.
Logs: the server keeps access logs (IP address, requested URL, time, browser information) for troubleshooting and security, plus usage statistics without file contents (page counts, number of outline entries, processing time).

5. Who we share information with

We do not sell your personal information or use it for advertising. We share it only with the following service providers, to run the service:

AI recognition providers: when you use AI recognition, contents-page images are sent to the vision-model provider we use (for example Google Gemini, Alibaba Cloud Qwen, ByteDance Doubao, Zhipu or Anthropic Claude, depending on configuration at the time). They receive only the page images, not your account details. Choose "on-device recognition" if you don't want to upload anything.
Google: when you choose to sign in with Google.
Email delivery provider: to send confirmation and password-reset emails.
Cloud hosting provider: our servers and data are hosted on rented cloud servers, which may be outside your country or region.

We may disclose necessary information to authorities where required by law.

6. How long we keep it

Workspaces (uploaded contents pages, PDFs processed on the server, outlines, settings): deleted automatically after 7 days without changes.
Account and points records: kept until you delete your account.
Library content (outlines, corrections, titles and covers you shared): kept long-term for other users; after you delete your account it is no longer linked to you or shown as your contribution.
Device-recognition records and logs: kept only as long as needed to enforce limits, troubleshoot and keep the site secure.

7. Your rights

Change your email and password in "Account settings".
Delete your account in "Account settings": your account details, points records, workspaces and ratings are deleted; library content is handled as in section 6.
Use "Export outline" at any time to save an outline to your own computer.
To access, correct or delete other information, or for any questions about this policy, email remegame.hotline@gmail.com. We will reply within 15 business days.

8. Security

Data is transmitted over HTTPS, passwords are stored only as hashes, and server access is restricted. No online service can be perfectly secure; if a security incident affects you, we will let you know promptly.

9. Children

The site is not intended for children under 14 (or the minimum age required in your country). Minors should use it with the consent and guidance of a parent or guardian.

10. Changes to this policy

We may update this policy and will change the date at the top when we do; significant changes will be announced on the site. Continuing to use the site after a change means you accept the updated policy.

11. Contact

Email: remegame.hotline@gmail.com