Privacy and local storage

Current implementation information, updated October 14, 2026. Advertising is disabled in this build.

Your documents

Castleaf’s editor code processes PDFs, imported images and fonts in your browser. It does not upload your PDF bytes, document text or filenames for editing. Export PDF and Save editable session create downloads on your device. The editor displays some document information, including filenames and editable text, on its page.

Local recovery and settings

Local autosave uses this browser origin’s IndexedDB storage for the latest document’s original bytes, committed edits and project fonts. Drafts are unencrypted. Only one editing tab can write the recovery slot at a time. Browser data clearing, private browsing, storage quotas and eviction can prevent or remove a draft.

Save an editable session for a portable backup. A .folio session contains your original document and edits, unencrypted, and should be kept private. The appearance preference is stored locally when browser storage permits. Document recovery does not transfer automatically when you move to another browser, device or website domain.

Optional advertising preparation

The prepared integration is disabled. It does not load the AdSense script, initialize a consent provider, make ad requests or reserve a visible advertising space in this build. A public publisher-verification meta tag and ads.txt entry identify the account for site verification; those declarations do not execute advertising code.

If advertising is enabled in a future release, it is intended to use one banner above the editing controls. Google and a consent-management provider may process information such as IP addresses, device/browser information, cookies and advertising identifiers. Consent settings, provider disclosures, applicable opt-outs and a way to withdraw consent must be available before activation.

Provider scripts loaded on the editor page have the browser privileges of that page, including potential access to displayed information and origin storage. The banner scaffold does not upload documents or add document content to custom targeting parameters. This is not technical isolation from third-party scripts, and non-personalized advertising can still use page context. The future ad-supported build must disclose its actual providers and data handling before release.

Website access and external links

Serving this website involves the hosting provider receiving ordinary connection information, such as your IP address and requested URL. Provider retention practices are not established by this source code. Following an external link, such as Browse Google Fonts, takes you to another service whose privacy practices apply.

The advertising section is preparation information and has not been legally reviewed. Before activating advertising, this page needs the actual operator/contact information, provider links, consent controls and disclosures appropriate to the released configuration. The current editor remains available without advertising.