Email address
The one attached to your Google account, received when you sign in. It identifies your account and carries your licence. Legal basis: performance of the contract.
Your documents never leave your computer.
This page distinguishes local document processing, account data and the services needed for the subscription. Last updated: 5 September 2026.
What the application never sends
Editing, text recognition and saving all run on your machine. No document content, no file name and no file path is ever sent to a server, neither to us nor to anyone else. There is no telemetry, no tracker and no automatic crash reporting.
What the application does send, and why
Machine fingerprint
A SHA-256 fingerprint derived from the Windows machine identifier. It cannot be reversed back to that identifier and serves only to enforce the limit of two computers per account. Legal basis: performance of the contract.
Device label
A neutral label such as “PC Windows · F938”, whose suffix comes from the fingerprint above. It lets you recognise a computer in your account list. Your computer’s real name is neither read nor transmitted.
Language
The interface language code, so we answer you in the right language.
Sign-in and certificate
Signing in goes through Google, using OAuth 2.0 with PKCE: your password never passes through 3PDF and is never accessible to us. The session token is stored in the Windows Credential Manager, encrypted by your Windows account. The server issues a signed certificate, valid for up to thirty days and, for a subscription, no later than the end of the period paid for. The application verifies it offline and allows three days of grace. Renewal uses the Internet and may run in the background while the application is connected.
Retention periods
- Account and licence: kept for as long as the account exists.
- Registered computers: kept until you release them, or until the account is deleted.
- Licence certificate: valid for up to thirty days, capped at the paid subscription period; renewed online while access rights allow it.
- Waiting list: until you unsubscribe or until commercial launch.
Who hosts what
Supabase
Account authentication and database, hosted on AWS in Ireland (eu-west-1), therefore within the European Union.
Vercel
Hosting for this site and for the routes that issue certificates.
Identity provider, only at the moment you choose to sign in.
Stripe
Subscription payment processing and billing management. The 3PDF site does not store card data.
This site
Session cookies allow you to sign in to your account. Vercel Web Analytics measures visits and page views without analytics cookies. URL query parameters and fragments are removed before sending. No advertising or profiling cookies are used. Your browser also temporarily remembers your subscription intention to resume the flow after sign-in. This information is separate from the content of your PDFs.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. Deleting your account erases your email address, your registered computers and your licence. Write to contact@3pdf.net: requests are handled within one month. You may also lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be), or with the supervisory authority of your own country.
Data controller
Kévin Delporte, sole trader — Chaussée de Charleroi 112, 1470 Genappe, Belgium. Company number (BCE/KBO): 0720.711.978. Any question or request about your data: contact@3pdf.net.