How Hoja handles your data.

Your files are processed entirely in your browser. We never see them, receive them, or store them. The most sensitive thing we collect is an anonymised page view count. If you're in a hurry, that's the whole policy.

We use Cloudflare Web Analytics to understand basic usage patterns. This service is privacy-friendly by design — it does not use cookies, does not track individuals across sessions, and does not build user profiles. The data it provides includes:

• Page views and which tools are used most often
• Approximate geographic region (country-level, not city)
• Browser type and operating system
• Referrer source (how you arrived at the site)

This data is aggregated and anonymous. It tells us "500 people used the compress tool today" — not who those people are or what files they worked with.

We want to be explicit about this, because it's the entire point of how Hoja is built:

• We never receive your PDF files or any other files you process
• We never see the contents, filenames, or metadata of your documents
• We do not collect your name, email address, or any personal information
• We do not have user accounts, so there is no account data
• We do not collect IP addresses for tracking purposes (Cloudflare may log these at the infrastructure level for security, but we do not access or store them ourselves)
• We do not use advertising tracking cookies or cross-site tracking

Every tool on Hoja runs entirely within your browser using the Web File API and JavaScript libraries. When you drop a file onto the tool, your browser reads it into local memory. The processing — splitting, merging, compressing, converting — is performed by code running in your browser tab. The output file is generated in memory and offered as a local download. At no point is your file transmitted over the network to any server.

The specific libraries we use are pdf-lib (for most PDF manipulation), PDF.js / pdfjs-dist (for rendering PDF pages to images), and mammoth.js (for reading Word files). All of these run client-side.

You can verify this yourself by opening your browser's network inspector and watching the network tab while you use a tool. After the initial page load, you will see no outgoing requests related to your file.

Hoja does not use tracking cookies. Cloudflare Web Analytics is cookieless. We do not use any third-party advertising tracking scripts.

Google AdSense, which we use to display ads, may set cookies on your device for ad personalisation. This is governed by Google's own privacy policy. You can opt out of personalised advertising via Google's ad settings or by installing a browser extension that blocks advertising scripts. The tools on Hoja work fully regardless of whether ads are blocked.

This site is supported by advertising through Google AdSense. When you visit Hoja, you may see ads. Google uses data it has collected about you through its own services to personalise these ads. We do not provide Google with any personal data about you — they use their own signals.

For more information on how Google uses data when you use its services, see Google's Privacy Policy. To opt out of personalised ads from Google, visit adssettings.google.com.

Hoja relies on the following third-party services to function:

• Cloudflare — DNS, CDN, and hosting infrastructure. Cloudflare may process connection metadata (IP addresses, request headers) for security and performance purposes. See Cloudflare's privacy policy.
• Google AdSense — advertising. May set cookies for ad personalisation. See Google's privacy policy.
• Cloudflare Web Analytics — privacy-friendly analytics. No cookies, no cross-site tracking. See how it works.
• Google Fonts — we load Space Grotesk and JetBrains Mono from Google Fonts. Google may log that your browser requested these fonts. See Google Fonts privacy FAQ.

Under GDPR (if you're in the European Economic Area) and CCPA (if you're in California), you have rights relating to personal data. Because we collect almost none, most of these rights are moot in practice, but we list them for completeness:

• The right to know what personal data we hold about you (we hold almost none)
• The right to request deletion of your personal data (there's essentially nothing to delete)
• The right to opt out of the sale of personal data (we don't sell data)
• The right to opt out of personalised advertising (via Google's ad settings)

To exercise any of these rights, contact us at legal@hojapdf.com.

Hoja is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided personal information through this site, contact us at legal@hojapdf.com and we will address it promptly.

If we change how we handle data in a meaningful way, we'll update this page and change the "last updated" date at the top. For significant changes, we may also add a notice on the homepage. Continued use of Hoja after a policy update constitutes acceptance of the revised policy.

Questions about this privacy policy or how your data is handled can be sent to legal@hojapdf.com. We're a small operation so responses may take a few days, but every message gets read.