Privacy Policy
Last updated: 25 October 2026Most Quickaboo tools run entirely in your browser, so your files stay on your device. The few that use our server say so on the page and delete your file automatically.
1. Summary
Most Quickaboo tools process your files inside your own browser: the file is read and changed on your device and is never sent to us. A small number of operations need our server (they are labelled "On our server" on the tool page and listed in the Trust Center). For those, the file travels over HTTPS, is deleted as soon as it has been processed, and the result is deleted when you download it, or automatically within 24 hours if you never do. Analytics and advertising cookies are only set on content pages and only after you accept them.
2. Who is responsible
- Service
- Quickaboo (quickaboo.com)
- Contact
- quickaboo@cosvire.com · Contact form
3. Where your files are processed
Unless listed below, a tool processes files on your device: the file is opened by your browser and is never sent to us. These operations use our server:
| Tool | What is sent | How long it is kept |
|---|---|---|
| Protect PDF | Strong AES-256 encryption is applied with qpdf on our server. | Deleted after processing, result deleted on download or within 24 hours |
| Unlock PDF | Decryption with the password you enter runs with qpdf on our server. | Deleted after processing, result deleted on download or within 24 hours |
| Favicon & App Icon Generator | The icon set and ZIP file are generated on our server. | Deleted after the ZIP is built, saved sets deleted after 72 hours |
| Percentage Calculator | The numbers you type are calculated on our server, no files are involved. | Numbers only, not stored |
Files sent to a server tool travel over HTTPS, are stored only in a private folder that cannot be reached from the web, and are deleted as described above. Abandoned results are removed by an automatic job.
4. What we collect
- Account data if you create an account: your email address, plus the name and country you choose to add. We do not use passwords, you sign in with a one-time code sent to your email, stored only in hashed form.
- Items you save to your account, such as QR codes and favicon sets.
- Messages you send through the contact form.
- Security log: the IP address and time of failed or suspicious requests, used for rate limiting and abuse prevention.
- Anonymous usage counts: daily totals per tool (for example tool opened, file added, download), with no IP address, cookie or identifier, so we can see which tools work and which fail.
- Error reports: the error message, page and browser type when a tool fails. File contents and file names are never included.
5. How long we keep it
| Data | Kept |
|---|---|
| Files processed on your device | Never sent to us |
| Files uploaded to a server tool (Protect PDF, Unlock PDF, Favicon & App Icon Generator) | Original deleted right after processing, result deleted when downloaded, or within 24 hours |
| Numbers sent to the Percentage Calculator | Not stored |
| QR codes and favicon sets you save to your account | 72 hours, then deleted automatically |
| Account (email address, optional name and country) | Until you delete your account |
| Sign-in codes | Stored hashed, expire after 10 minutes and are then deleted |
| Security log (IP address of failed or suspicious requests) | 90 days |
| Contact form messages | 12 months |
| Anonymous usage counts (for example "Merge PDF: 120 downloads today", no IP address, no cookie) | 24 months |
| Error reports (error message and page, never file contents) | 30 days |
6. Cookies and browser storage
Our own cookies are functional: a session cookie keeps you signed in and protects forms against forgery, and your cookie choice is remembered in your browser. Tool pages set no analytics or advertising cookies.
On content pages (home, categories, blog) we ask before loading Google Analytics or personalised advertising. If you choose Reject, analytics does not run and any ads shown are non-personalised. You can change your choice at any time with the Cookie settings link in the footer.
7. Third-party services
| Service | Purpose | When it is used |
|---|---|---|
| Google Analytics | Aggregated traffic statistics | Content pages only (home, categories, blog), and only after you accept analytics cookies |
| Google AdSense | Advertising | Content pages only, never on tool pages. Non-personalised unless you accept advertising cookies |
| Google reCAPTCHA | Spam and abuse protection | Contact form and sign-in only |
| Email delivery provider | Sending sign-in codes and replies to your messages | When you sign in or contact us |
| Hosting provider | Runs our website and the server tools listed above | Every visit (standard web server logs) |
8. Your rights
You can view and delete saved items in your dashboard and delete your account in Account Settings at any time. You can also ask us for a copy of your data, a correction or deletion through the contact details in section 2. Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you may also have the right to object, restrict processing or complain to your data-protection authority.
9. Children
Accounts are not intended for children under 16. The tools themselves can be used without an account.
10. Changes
When this policy changes we update the date at the top. Material changes are also announced on the Trust Center page.