Privacy

This program does not transfer any information to other networked systems unless specifically requested by the user.

That is the whole policy. The rest of this page says what it means in practice, so you can check it against the code. It is the same text as PRIVACY.md in the repository, which is the copy that ships inside the program.

What the program contacts

• The providers you sign in to. When you run a download, the program talks to that provider's website, and only that one, using the browser session you signed in with yourself. It reads your document list and fetches the PDFs the provider already generated. It never sends your password or a verification code anywhere, because it never has them. You type those into the provider's own page.
• A browser download, once, if you agree. If no usable browser is found on your computer and you sign in from a terminal, the sign-in step offers to download a private copy of Chromium from Playwright's release server. It asks first and does nothing if you decline. The control panel cannot ask, so there it only says no browser was found. If Edge, Chrome, Brave, Vivaldi or Opera is already installed, it uses that and never offers the download.

Nothing else. There is no update check, no crash reporting, no usage statistics, no analytics, and no account with this project. The program has no server of its own to talk to.

What stays on your computer

Everything the program produces stays in the folders you chose.

• The PDFs it downloads.
• A record of what it has already downloaded, so it never fetches the same document twice, even after you delete the PDF.
• A browser profile per provider, holding that provider's signed-in session. This is the sensitive one. It lives next to that provider's downloads, and the program's setup and packaging both refuse to copy it anywhere.
• Logs and diagnostics, written only when you run a command, kept next to the downloads.

The control panel is a small local web server that listens on 127.0.0.1 only. It is not reachable from other machines and rejects requests that do not come from your own browser on the same computer.

PaperPull Server, the edition you run on a machine at home, listens on your home network instead, behind a password you choose. What it contacts and what it keeps are on its own page, PRIVACY-SERVER.md.

What this project collects about you

Nothing. The project has no telemetry and no way to know you installed it. GitHub, where the releases are hosted, has its own privacy statement covering downloads from its site, and the Microsoft Store has its own covering purchases there.

This website

This site is static files served from a private server. It sets no cookies. The download buttons ask GitHub's public API for the newest release so they can point straight at it, which is a request from your browser to GitHub and nothing else.

It does count, in two ways, so that the project can tell whether anyone is finding it and what they want. Both are described here in full.

• Page views. Cloudflare Web Analytics, which counts visits, pages and load times without cookies and without a persistent identifier, and reports them to the project only as totals. It is loaded only if the site has been given a Cloudflare token, and not at all if your browser sends a Do Not Track or Global Privacy Control signal.
• A few named events. When you click a download button, the Store link, a support link, the GitHub link, play the demo, open a provider in the directory, or open one of the guides, your browser sends one small request to this site naming the event, with at most three short fields (which operating system's download, which provider by its short name), and the campaign name from the link you arrived by if it carried one. The server writes that line to a log with the last part of your address blanked out. It never records the page you were on, where you came from, anything you typed, or anything about your computer beyond what every web request carries. Nothing is sent if your browser asks not to be tracked.

What is deliberately not collected: full addresses, referrers, search text, form input, session or cross-site identifiers, and anything from inside the program, which has no telemetry at all. Event logs are kept for ninety days and read only by the maintainer. This is not a claim that counting is anonymous in every legal sense, only a description of exactly what is counted so you can decide.

Who runs PaperPull

PaperPull is a trade name of TNE Enterprises LLC, a Virginia company, which publishes the program and runs this website. Questions about this policy go to support@paperpull.net.

Reporting a concern

If you find the program contacting anything not listed above, that is a bug and a serious one. Open an issue, write to support@paperpull.net, or follow SECURITY.md.