Privacy

Merge and the experimental viewer run in your browser. The PDF bytes, extracted text, and filenames are not sent to Kitolune or to an account service. There is no account service in this build.

What still uses the network

• The first visit downloads the application, font, and merge worker from this site.
• Opening PDF Studio downloads the PDFium pack from this same site. It is not loaded for merge.
• A service worker stores those assets so a later visit can reload offline.

What is stored

The host can log your IP address and the public asset paths requested by your browser. No analytics are enabled.

Theme, pinned tool IDs, and the sidebar preference can be saved in this browser. Documents stay in memory unless you choose “Save session on this device.” That action stores the original files and their names in this browser’s IndexedDB, up to five sessions and 64 MiB total. Kitolune does not encrypt these saved files. Anyone with access to this browser profile may be able to read them. The browser may also clear its storage.

Reopen or delete saved files from Home → Recent & saved. “Delete all saved sessions” removes saved documents without changing your downloaded results, preferences, or installed offline packs. A saved session contains original files, not tool settings or result history. Unsaved recent files disappear when the tab reloads or closes.

What this page does not claim

Third-party engine and font notices

• A browser extension or the device itself can still see open files.
• Encryption, redaction, and metadata removal are not shipped.
• This work-in-progress build asks crawlers not to index it. Open release gates remain.