Effective date: August 10, 2026

The short version

We never receive your files. We do not run accounts, so we hold no name, no email address, and no password for you. What we do have is ordinary website data — the analytics and advertising signals that Google collects on our behalf, and the request logs any host on the internet produces. Everything below is the detail behind those three sentences.

Your files are never sent anywhere

Every tool on this site — video, PDF slides, PPTX, infographic, Gemini image, audio, and metadata — runs in JavaScript and WebAssembly inside the page you already have open. FFmpeg compiled to WebAssembly handles video and audio, pdf.js and pdf-lib handle PDF, JSZip handles PPTX, and the Canvas API handles images.

This is not a policy choice we could quietly reverse. The site is a static bundle of files with no upload endpoint, no storage bucket, and no server-side processing. There is nowhere for a file to go even if someone asked for one.

You can confirm it yourself in about thirty seconds. Open your browser's developer tools, switch to the Network panel, clear it, then clean a file. You will see the page's own scripts load, and you will see no request carrying your file. We would rather you check than take our word for it.

What your browser does fetch

Processing locally still means downloading the programs that do the processing. When you use a tool, your browser may request:

The FFmpeg WebAssembly core from https://cdn.notebooklmremover.org/ffmpeg, for video and audio work.
pdf.js, pdf-lib and JSZip from the same domain, for documents and decks.
Web fonts from Google Fonts.

Those requests travel outward carrying the program, never your file. Like any HTTP request they do reveal your IP address, your user agent, and which asset you asked for, to whoever serves it — that is unavoidable for anything delivered over a network, and it is worth stating plainly rather than glossing over.

Analytics

We use Google Analytics 4 (measurement ID G-07SYXQDFLZ) to see which pages people actually use. It records the usual things: page views, session length, approximate location derived from IP, device and browser type, and the referring site.

We also send a small set of custom events so we can tell whether the tools are working. Being specific about them is more useful than a vague reassurance, so here is the complete list of what those events contain: which engine ran, how many files were selected, the total size in megabytes, the file's MIME type, which processing options were toggled, how long the job took, and whether it succeeded, failed, or was rejected for being too large.

Filenames are never sent. File contents are never sent. "A 14.2 MB video/mp4 finished in 41 seconds" is the shape of what we learn — enough to spot that a format is broken, not enough to know anything about you or your work.

Advertising

This site is free and carries Google AdSense (publisher ID ca-pub-5240814951889505) to pay for the domain, hosting, and development time. Google and its advertising partners use cookies and similar technologies to serve and measure ads, which may include ads based on your prior visits to this or other sites.

Two opt-outs are worth knowing about, and neither of them costs you access to anything here:

Turn off ad personalisation across Google's products at Google Ads Settings.
Opt out of many third-party vendors at once at aboutads.info/choices.

Ads never see your files. They are rendered in a separate frame and have no access to the file you dropped in — the browser's own origin isolation enforces that, not our good intentions.

Cookies and local storage

Three categories, and they behave differently:

Necessary. A single localStorage entry recording whether you chose light or dark mode. It never leaves your device and is not a cookie in the tracking sense. Nothing else on this site requires storage to function.
Analytics. Set by Google Analytics to distinguish one visit from another. Blocking them costs you nothing; the tools work identically.
Advertising. Set by Google AdSense and its partners to serve, cap, and measure ads. Blocking them means you see less relevant ads, not fewer.

Your browser settings can block or clear any of these, and clearing site data resets all of them. No tool on this site checks for a cookie before it will run.

Consent in the EU, UK and EEA

For visitors in regions where consent is required before advertising and analytics cookies may be set, a Google-certified consent management platform is configured on the AdSense account and its message is delivered with the ad tag. It appears before those cookies are set and records your choice.

If you want to revisit that choice later and no re-prompt is offered, clearing this site's cookies in your browser will make the message appear again on your next visit.

There are no accounts, so there is no profile

Most privacy policies devote a section to exporting or deleting your account data. That section does not apply here and it would be misleading to include a version of it. There is no sign-up, no login, no email list, and no user database — nothing was ever created, so there is nothing to export and nothing to delete.

The practical consequence: a data breach of this site cannot expose your files or your identity, because neither is stored. It could only expose static HTML that is already public.

Third parties that receive data

Google AdSense — ad serving and measurement (ad technology policies).
Google Analytics 4 — traffic measurement (Google Privacy Policy).
Google Fonts — typeface delivery; your IP and user agent reach Google when a font is fetched.
Cloudflare — hosting, CDN, and DDoS protection for this site and for cdn.notebooklmremover.org (Cloudflare Privacy Policy).

Each of these sees normal request data — IP address, user agent, page URL, timestamp. None of them sees a file, because no file is ever part of a request.

Retention

Files: not applicable — they never arrive, so retention is zero by construction rather than by schedule. Analytics and advertising data: held by Google under its own retention settings and policies, not on any system we operate. Server logs: kept by Cloudflare as part of hosting.

Your rights

Depending on where you live, laws such as the GDPR, the UK GDPR, or the CCPA may give you rights over personal data — to access it, correct it, delete it, object to certain processing, or complain to a supervisory authority. We are not in a position to tell you which of those apply to you, and this page is not legal advice.

What we can tell you is exactly what we hold, which is the part most policies leave vague: no files, no account, no contact details unless you emailed us, and no direct access to the analytics and advertising identifiers Google manages. If you exercise a right against us, the honest answer for most requests will be that we hold nothing to act on, and we will say so and point you to Google's own controls, which are linked above. Email [email protected] and we will answer.

Children's privacy

This site is not directed at children under 13 and we do not knowingly collect personal information from them. Since there is no registration of any kind, there is no age field to collect and no account to remove. A parent or guardian who has a concern can write to the address above.

Changes to this policy

When this policy changes we update the effective date at the top of the page and publish the revised text here. Substantive changes to how data is handled are also noted in the changelog, so there is a dated record rather than a silent edit. There is no mailing list to notify, so checking this page is the way to see the current version.

Contact

Privacy questions, data requests, or corrections to anything stated above: [email protected]. For how the client-side code is built and what it touches, see the security page; for the engineering behind each tool, see about.

Privacy Policy