Privacy policy

PDF Assembler · last updated 9 October 2026

In short

PDF Assembler collects no data about you and sends nothing anywhere. There is no server for it to send to.

Your documents

The app reads files from your own disk and writes what it makes to a folder you choose. Nothing is uploaded, copied elsewhere, indexed or examined. Passwords you type, to open a protected PDF or to protect one you're saving, are never written anywhere. The one you set on the Save step stays in memory only, until you start over or quit.

The app reads the clipboard only when you paste, and pasting into the window only adds the files or the picture you copied. It writes to the clipboard only when you choose Copy or Cut. It never looks at the clipboard on its own.

While it works, the app uses a temporary folder provided by your operating system and empties it when you start over or quit. If the app is ever forced to close, it clears what was left the next time it opens.

On Windows, each file you save is first written as a hidden temporary file, named ~pdfa-….tmp, in the folder you chose, already protected with your password if you set one, and then renamed. If the app is forced to close at that moment, such a file can stay behind. It is safe to delete.

What is stored on your computer

One small settings file in your user profile. It holds your interface language, the thumbnail size you last chose, and three counters and a yes/no flag that keep the review request to three times in total. On macOS it also holds the folder you last saved to, so the next save opens there. It holds no document names or contents, and it never leaves your computer.

The operating system also remembers some things for every app. On macOS it writes them into the same file: the window's size and position, and the folder the Open and Save dialogs last showed, which can be the folder you last added files from. On Windows, the Open and Save dialogs keep the folders and file names they last showed in the registry instead.

Where to find it: on a Mac, in ~/Library/Containers/com.bhgmc.pdfassembler for the App Store version, or ~/Library/Preferences/com.bhgmc.pdfassembler.plist for a copy installed another way; on Windows, in your user profile. Deleting it removes everything the app has recorded. Uninstalling the Microsoft Store version deletes it for you, unless the zip version of the app was used first and created it. Uninstalling the Mac app or the zip version leaves it behind. What the system remembers for every app is the system's to keep or clear.

Analytics, crash reports and accounts

There are none. The app has no usage statistics, crash reporting, unique identifier, advertising, account, sign-in or licence check, and it contains no third-party analytics or advertising code.

The review request

This is the one thing that leads outside the app. After you save a PDF, the app may ask whether you'd like to write a review. It asks at most three times in total, with at least five saves in between, so a long session can bring more than one request.

On Windows, saying yes opens this app's review page in the Microsoft Store, which takes it from there under its own privacy terms. Saying no is permanent. On macOS it is Apple's own rating prompt, which Apple requires apps to use, and you answer it without leaving the app. It has no "don't ask again" option, so if you close it, it may come back, within the same limit of three. Either way, nothing about you or your documents is passed on.

The stores

The app is sold through the Microsoft Store and, once its listing is live, the Mac App Store. Microsoft or Apple handle your purchase, payment and any review you write, under their own privacy policies. I see what the stores show every developer: statistics on sales, store visits and use, the reviews people publish, and reports of the app crashing or hanging. Those reports don't come from the app, which sends nothing. Windows and macOS make them according to your system's diagnostic settings (on a Mac, only if you chose to share them with app developers), and the store passes them on. On Windows such a report can include a snapshot of the app's memory at the moment it failed, which may hold part of a document that was open; I use these reports only to find and fix the fault. Apart from the name you post a review under, I never see your name, address or payment details.

This website and support email

This website has no cookies, no analytics and no scripts, and keeps no logs of its own. It is served by Cloudflare, which, like any web host, handles your IP address and the details of each request to deliver the pages and protect them from attacks.

Mail to support@pdf-assembler.com is forwarded by Cloudflare to my own mailbox. I use what you write only to answer you, and I delete it when you ask. Cloudflare and my email provider may process this outside Switzerland, including in the United States. I rely on my legitimate interest in running the site safely, and on your request when you write to me.

Your rights

You can ask me what personal data I hold about you (in practice, only emails you sent), and have it corrected or deleted, by writing to the address below. If you think I have handled it wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, to your country's data protection authority.

Children

The app is suitable for all ages. It collects no data from anyone.

Changes

I update this policy when the app changes, or when something here needs to be said more precisely. The date at the top is the last time that happened.

Contact

This policy is mine, as the person responsible for the app and this site: Benjamin Carrel, BHGMC, Schulstrasse 20, 5417 Untersiggenthal, Switzerland. You can reach me at support@pdf-assembler.com.