Legal

Privacy Policy

Last updated: June 2025

article2pdf ("we", "us", "our") operates the article2pdf website and service (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

1.1 Information you provide

  • Account information. When you create an account we collect your email address and, if you sign in with Google, your name and profile picture as provided by Google OAuth.
  • URLs you submit. When you paste an X.com article link the URL is processed to generate your PDF. We store a hash of the URL so we can cache and serve the result.
  • Payment information. Billing is handled entirely by Paddle. We do not store your card number or bank details. Paddle shares a customer ID and subscription status with us so we can enforce plan limits.

1.2 Information collected automatically

  • Usage data. We log which features you use, how many PDFs you generate, and rough request timestamps. This lets us enforce daily limits and debug issues.
  • Device and browser data. Standard server logs include your IP address, browser type, and the URL path requested. We retain these logs for up to 30 days.
  • Cookies and session tokens. We use a single httpOnly, Secure session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

2. How we use your information

  • To generate, cache, and deliver your PDFs.
  • To authenticate your session and protect your account.
  • To enforce plan limits (free, Creator, Pro) and process payments through Paddle.
  • To send transactional emails such as magic-link sign-in links (no marketing without explicit consent).
  • To detect abuse, fix bugs, and improve the Service.

3. Sharing your information

We do not sell your personal data. We share information only in these limited cases:

  • Paddle — our payment processor. Their Privacy Policy governs data they collect during checkout.
  • Google OAuth — only used if you choose to sign in with Google. Google's standard OAuth flow is governed by Google's Privacy Policy.
  • Infrastructure providers — we use Cloudflare for hosting and CDN. Cloudflare may process traffic metadata in accordance with their privacy policy.
  • Legal requirements — we may disclose information if required by law, court order, or to protect the safety of users or the public.

4. Data retention

We keep your account data for as long as your account is active. Generated PDFs and cached article content are retained to serve repeat requests and are purged on a rolling 90-day basis. Server logs are deleted after 30 days. If you delete your account, your personal data and saved library are removed within 14 days, except where retention is required by law.

5. Your rights

Depending on your location you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at privacy@article2pdf.com. We will respond within 30 days.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

6. Security

We use HTTPS for all data in transit. Session tokens are stored in httpOnly, Secure cookies that are not accessible to JavaScript. We do not store payment card data. Despite these measures, no system is completely secure — please use a strong password and sign out on shared devices.

7. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Material changes will be communicated via email or a prominent notice on the Service.

9. Contact

Questions about this policy? Reach us at privacy@article2pdf.com.