Last updated: 21 October 2026
The short version
Your files never leave your device. Every tool on DocAura works inside your own web browser. We do not upload, store or see your photos, PDFs, resume or signature.
How we keep your files private
- No upload, enforced by your browser. Every page carries a strict security rule (a “Content Security Policy”) that tells your browser not to let the page send data to any other website. Even if someone tried, the browser would block it.
- All our code is on our own site. The PDF and image tools are stored on DocAura itself, not loaded from other companies, so nobody else can change them.
- Files in PDFs cannot run code. PDFs are opened in a safe mode that ignores any scripts hidden inside them.
- Protected from fake look-alike frames. Our pages refuse to run inside another website’s frame, which stops tricks that hide our buttons under someone else’s page.
- Secure connection. The site is only served over HTTPS (the padlock in your address bar).
Check it yourself in 30 seconds
- Open any tool, for example “Make PDF smaller”.
- Turn on airplane mode or switch off your Wi-Fi.
- Choose a file and use the tool as normal. It still works — because nothing is being sent anywhere.
Information stored on your device
The resume builder and cover letter builder save what you type in your browser’s local storage so you don’t lose your work. If you tick “Remember my signature”, your signature is saved the same way. The “Bigger text” setting is saved too. This information stays on your device only. You can delete it by pressing “Start empty” in the resume builder, unticking “Remember my signature”, or clearing your browser’s site data.
Tip: on a shared or public computer, don’t tick “Remember my signature”, and press “Start empty” when you’re done.
Advertising
To keep the tools free, we plan to show advertisements from Google AdSense. When ads are switched on, Google and its partners may use cookies to show ads based on your previous visits to this and other websites. You can turn off personalised advertising at Google Ads Settings, and learn more at How Google uses information from sites that use its services. Where the law requires it, you will be asked for consent first. Ads never get access to your files — they are processed separately inside your browser.
Analytics
We count visits and which tools are used with Umami, a privacy-first service. It uses no cookies and does not collect your personal data. It records things like which page was opened, which tool or option was chosen (for example “200KB”), whether a download happened, and roughly which country the visit came from. It never receives your files, their names or anything you type — your files stay inside your browser.
Fonts and hosting
Our pages load the Poppins font from Google Fonts and are hosted on GitHub Pages. Like any website, these services receive your IP address as part of normal web requests.
Children
DocAura is a general-audience website and does not knowingly collect personal information from children.
Reporting a security problem
If you find a security problem, please email praveen.kumar [at] gmail [dot] com. We will look into every report.
Contact
Questions about privacy? Email praveen.kumar [at] gmail [dot] com.