Redactron / Privacy
Privacy Policy
The short version. Redactron works on your PDF inside your own browser. Your documents are never uploaded, and we cannot see them. Redactron sets no cookies and runs no analytics or advertising. The only personal data we handle comes from buying and activating a license, and Lemon Squeezy, our payment provider, handles most of it.
Who we are
Redactron is a PDF redaction tool at redactron.app. In this policy, "we" and "us" mean the people who make and sell Redactron. Redactron is sold through Lemon Squeezy under the store name VibeFast. You can reach us at support@redactron.app.
Your documents
When you open a PDF in Redactron, your browser reads it, finds the text, draws the redactions and builds the new PDF, all on your device. The file is never sent to us or to anyone else. We cannot see it, keep it or recover it. When you close the tab, the working copy is gone. The exported PDF is saved wherever you choose to save it.
What Redactron stores on your device
Redactron uses your browser's local storage for two things. This data stays on your device. We do not receive it.
- The free-tier counter. The current month and how many documents you have exported this month.
- Your license, if you activate one. The license key, the plan (Pro or Team), the activation ID, the product name, the email address Lemon Squeezy returns with the license, the activation date, the license status and the date of the last license check.
Redactron also keeps an offline copy of the app in your browser's cache storage. On your first visit, a service worker (a small script your browser runs for this site) saves the page, the app code, the pdf.js engine and the fonts. This is why the redactor works offline after your first visit. The cache holds only Redactron's own files, never your documents.
To remove your license from a device, use "Remove from this device" in the app. To remove everything, including the offline copy, clear this site's data in your browser settings.
What leaves your device
When you load the site
Cloudflare hosts redactron.app. Like any web host, Cloudflare processes standard server log data when you load a page, such as your IP address, your browser's user agent and the pages you request. See Cloudflare's privacy policy.
When you activate, check or remove a license
When you activate a license, Redactron sends your license key and a device label to Lemon Squeezy's license service at api.lemonsqueezy.com. If that address is blocked, it tries Lemon Squeezy's backup address once. The device label is built from your browser's platform name, for example "Redactron on MacIntel". Redactron checks the license again at most once every 14 days. When it checks or removes a license, it sends the key and the activation ID, so Lemon Squeezy knows which activation it is. Removing a license frees that activation. As with any web request, Lemon Squeezy also sees your IP address. No document data is ever part of these requests.
When you buy
Lemon Squeezy's checkout script (lemon.js, from assets.lemonsqueezy.com) does not load when you open the site or while you redact. The page loads it only when you point at, focus, tap or click a Buy button, on the pricing cards or in the upgrade dialog in the app. As with any web request, Lemon Squeezy sees your IP address when the script loads. If the script is blocked, the Buy button opens the Lemon Squeezy checkout page directly. Lemon Squeezy is the merchant of record. It collects and processes your name, email address, payment details and billing address under its own privacy policy, and its checkout may use its own cookies. Once the checkout is open, it is Lemon Squeezy's page inside ours: it loads its own payment and analytics scripts (for example Stripe, PayPal and Google Analytics). None of that runs before you click Buy. Lemon Squeezy shares order details with us, such as your name, email address and what you bought, so we can provide support and refunds. We never see your full card number.
When you email us
If you write to support@redactron.app, we receive your email address and whatever you send. We use it only to answer you.
What we do not do
- Redactron sets no cookies of its own.
- We run no analytics, advertising or tracking scripts.
- Our fonts are served from redactron.app. Apart from Lemon Squeezy's checkout script, which loads only when you point at, focus, tap or click a Buy button, the site loads no scripts or fonts from other companies.
- The site sends a Content-Security-Policy, a browser rule that blocks scripts from other companies except Lemon Squeezy's checkout script.
- We do not sell or rent personal data, and we do not use it for advertising.
How long we keep data
Data in your browser stays until you clear it. Cloudflare keeps its logs under its own policy. We keep order records and support emails only as long as we need them for support, refunds, and tax and accounting records.
Your rights
Depending on where you live, you may have the right to see the personal data we hold about you, correct it, delete it, object to how we use it, or receive a copy. To make a request, email support@redactron.app. We will answer within 30 days. For payment data, you can also contact Lemon Squeezy directly. You may also complain to your local data protection authority.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how your data is handled, we will describe it on this page before it takes effect.