Privacy Policy
PageBreath — PDF Transformation Tool
Last Updated: December 5, 2025
This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
1. Data Controller
For the purposes of the GDPR, the data controller responsible for your personal data is:
PageBreath
Operated by Berke Yazan
Email: contact@berkeyazan.com
If you have any questions regarding data protection, you may contact us at the email address above.
2. What Data We Process
PageBreath processes all documents locally on your device (client-side). This means:
- Your PDF files are never uploaded to our servers
- Document contents are never transmitted over the internet
- All processing occurs in your web browser using JavaScript
- We have no access to your documents at any time
✓ Zero Data Collection: We do not collect, store, or process any personal data from your documents.
3. Legal Basis for Processing (Article 6 GDPR)
Since PageBreath performs all operations locally on your device and does not collect personal data, the GDPR's requirements for a legal basis apply only to minimal technical data collected by our hosting provider:
- Legitimate Interests (Article 6(1)(f)): Basic server logs (IP addresses, timestamps, user agents) may be collected by our hosting provider for security, fraud prevention, and maintaining service availability.
4. Categories of Personal Data
We categorize data as follows:
Document Data (Your PDFs)
Collected: No
Stored: No
Transmitted: No
All processing is 100% local to your device.
Technical Data (Server Logs)
Collected by: Hosting provider (Vercel)
May include: IP address, browser type, device type, access timestamps
Purpose: Security, service availability, abuse prevention
Retention: Per hosting provider's policy (typically 30 days)
Cookies & Local Storage
Tracking Cookies: None
Analytics: None
Essential Cookies: None required for PageBreath functionality
5. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Note: Since PageBreath does not collect or store personal data from your documents, most of these rights are automatically satisfied. For any concerns about server logs collected by our hosting provider, please contact us.
6. Data Retention
- Document Data: Not retained. Your files exist only in your browser's memory during processing and are discarded when you close the page.
- Server Logs: Retained by our hosting provider per their data retention policy (typically 30 days for security purposes).
7. International Data Transfers
Our website is hosted by Vercel, Inc., which may process basic server log data in the United States. Vercel complies with applicable data protection requirements and implements appropriate safeguards including Standard Contractual Clauses (SCCs) for international transfers as required under GDPR Chapter V.
8. Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (Article 32 GDPR):
- Local Processing: By design, your documents never leave your device, eliminating transmission risks.
- HTTPS Encryption: All connections to our website are encrypted using TLS.
- No Database: We do not maintain any database containing user data.
9. Children's Privacy
PageBreath is not directed at children under the age of 16. We do not knowingly collect personal data from children. Since we do not collect personal data at all, this concern is inherently addressed by our architecture.
10. Third-Party Services & Sub-Processors
We use the following third-party services:
Vercel Inc. (Hosting Provider)
Purpose: Website hosting and content delivery
Data Processed: Server logs (IP, user agent, timestamps)
Location: United States (with global edge network)
Privacy Policy: vercel.com/legal/privacy-policy
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
12. Right to Lodge a Complaint
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR.
You may contact your local Data Protection Authority (DPA). A list of EU DPAs can be found at: European Data Protection Board - Members
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: contact@berkeyazan.com
We aim to respond to all requests within 30 days as required by GDPR.
Privacy Summary
- ✓ Your documents never leave your device
- ✓ We do not collect, store, or sell your data
- ✓ No tracking cookies or analytics
- ✓ GDPR compliant by design
- ✓ Open and transparent about our practices