MicroVibes Software Studio
Get Extension
100% Client-Side PDF Processing • 0 Document Bytes Uploaded

SanitizePDF — Zero-Upload Privacy Policy & Terms of Use (EULA)

Product: SanitizePDF: 100% Local Redaction & Scrub (Browser Extension & Web App)
Provider: MicroVibes (The Netherlands • [email protected]) • Last Updated: November 2026

Core Privacy Guarantee: All PDF parsing, automated regex and checksum detection (IBAN, BSN, SSN, Tax IDs, CV contact details), manual box redaction, metadata scrubbing, and 300 DPI HTML5 canvas rasterization happen 100% locally inside your browser's memory. Zero PDF document bytes, document text, email bodies, or filenames are ever uploaded or transmitted to MicroVibes or any third-party server.

1. What Data Never Leaves Your Device

  • PDF Files & Document Content: Your PDF documents are parsed and flattened strictly within local browser memory using bundled client-side libraries (PDF.js and pdf-lib). MicroVibes never receives, stores, or acts as a data controller or processor for any document you open or export.
  • Redacted PII & Metadata: Detected personal data (names, phone numbers, emails, bank accounts, national ID numbers) and PDF metadata (Author, Creator, Producer, timestamps, and XMP streams when metadata scrubbing is enabled) are processed locally and destroyed on-device during 300 DPI bitmap rasterization.
  • Agency Branding Assets: Any custom Banner Text, Watermark text, or Agency Logo image you configure in Settings is stored strictly in local device storage (chrome.storage.local) and never synced or uploaded.
  • Webmail Content: In Gmail and Outlook Web, the extension inspects locally only PDF files (up to 50 MB) that you actively attach to a compose draft. It never reads your inbox, email message text, subject lines, recipients, or non-PDF attachments.

2. Minimal Data Transmitted for Licensing, Checkout & Abuse Prevention

Free-tier usage of SanitizePDF requires no user account, login, or email registration. Solely to verify paid Pro subscriptions (GDPR Art. 6(1)(b) contract performance) and enforce hardware seat limits and free-tier credit integrity across reinstalls (GDPR Art. 6(1)(f) legitimate interest in fraud and abuse prevention), the software communicates over HTTPS with only two endpoints:

Endpoint Data Transmitted Purpose
https://api.polar.sh License key entered by user, Polar organization ID, client instance label, activation ID, and a non-reversible SHA-256 hardware/environment hash (deviceHash). Activates and validates paid Pro subscription keys and retrieves the subscription expiration timestamp (expires_at) and allowed device seat limit.
https://sanitizepdf-license.pages.dev SHA-256 deviceHash, SHA-256 keyHash (plus the license key solely when verifying seat limits server-side against Polar.sh), activation ID, plan/seat/expiration metadata, and monotonic free-tier credit counter token (remaining free scans and weekly reset timestamp). Enforces per-plan hardware seat limits (1 device for Weekly, 3 devices for Monthly/Annual) and restores free-tier credit state if the extension is uninstalled and reinstalled on the same device.

How deviceHash Works: Your browser computes a one-way cryptographic SHA-256 digest locally from standard hardware/environment parameters (OS platform/architecture, CPU core count, device memory bucket, timezone, and WebGL renderer capabilities). Raw hardware strings never leave your device and cannot be reversed to identify you personally.

Checkout & Merchant of Record (Polar.sh): When you purchase a Pro subscription via buy.polar.sh, Polar Software, Inc. (Polar.sh) acts as the independent Merchant of Record and collects your billing email, payment method, and tax/VAT details under Polar's own Privacy Policy and Terms to issue your license key and invoices. Standard HTTPS connections to Polar.sh and Cloudflare Pages transiently process network IP headers at the TLS edge solely for routing and DDoS protection.

Controller, Retention & GDPR Rights: For minimal licensing and hashed seat-lock records, the data controller is MicroVibes (The Netherlands, [email protected]). Hashed seat and credit records are retained only as long as necessary to enforce active licenses and prevent abuse. Subject to applicable law, you may contact [email protected] regarding GDPR access, erasure, or objection requests, or lodge a complaint with your supervisory authority (including the Dutch Autoriteit Persoonsgegevens).

3. Browser Permissions & Profile Sync Explained

  • storage: Stores your redaction preferences, selected countries/data types, theme, Terms acknowledgment (eulaAccepted), branding text, cached license status, and credit state in chrome.storage.local and chrome.storage.sync. If you enable profile sync in Google Chrome or Microsoft Edge, your browser vendor syncs non-document extension settings across your own signed-in browser profile (PDF files and uploaded logos are never placed in sync storage).
  • scripting: Lazily loads the local PDF redaction engine (lib/pdf.min.js, lib/pdf.worker.min.js, lib/pdf-lib.min.js, sanitizer.js) into your active Gmail or Outlook tab only when you attach a PDF file, keeping ~2 MB of PDF libraries out of webmail memory until needed.
  • host_permissions (mail.google.com, outlook.live.com, outlook.office.com, outlook.cloud.microsoft): Enables the optional Pro in-draft PDF attachment interceptor so you can preview, redact, and replace attached PDFs before sending.
  • host_permissions (api.polar.sh, sanitizepdf-license.pages.dev): Used exclusively for Pro license verification, device-seat locking, and free-tier credit synchronization as detailed in Section 2.

4. Chrome Web Store & Microsoft Edge Limited Use Disclosure

SanitizePDF's use and transfer of information received from browser APIs adheres strictly to the Chrome Web Store User Data Policy (including the Limited Use requirements) and the Microsoft Edge Add-ons Store Developer Policies:

  • MicroVibes does not sell, rent, or transfer any user data to third parties for advertising, analytics, data brokering, AI model training, or creditworthiness determination.
  • MicroVibes does not use any remote code execution, third-party tracking scripts, or behavioral telemetry.

5. End-User License Agreement (EULA), Verification Duty & Liability Disclaimer

By installing, accessing, or exporting documents with SanitizePDF (the "Software"), you enter into a binding agreement with MicroVibes (established in The Netherlands, [email protected]). If you do not agree to these Terms, do not use the Software.

  • 5.1 Assistive Tool & Mandatory Human Visual Inspection (GDPR / UK GDPR / CCPA / HIPAA): Automated regex and checksum pattern matching is strictly an assistive productivity aid—not an automated legal auditor, OCR engine, or compliance guarantee. Automated scans inspect digital PDF text layers only and cannot detect all sensitive information, including flat/scanned image PDFs without selectable text, text inside embedded images/photos/logos, handwriting, custom or corrupted PDF font encodings, unconventional formatting, or pages beyond any user-configured scan depth—including in Batch Queue (up to 50 PDFs) and Webmail Attachment Interceptor workflows. Under GDPR, UK GDPR, CCPA/CPRA, HIPAA, and all applicable laws, you remain the sole Data Controller (or covered Business/Entity) and assume 100% sole responsibility for visually inspecting every page of every exported PDF prior to sharing, publishing, or transmitting it.
  • 5.2 Destructive Bitmap Flattening & Original File Backups: Exporting intentionally rasterizes pages into flattened bitmaps (300 DPI or 150 DPI) and rebuilds a new PDF, permanently destroying selectable text, hyperlinks, form fields, annotations, accessibility tags, and digital signatures. You are solely responsible for retaining backups of your original source files before sanitizing or replacing attachments.
  • 5.3 Third-Party Webmail Platforms (No Interception Guarantee): Gmail and Outlook Web are third-party applications operated by Google and Microsoft whose interfaces and DOM structures may change at any time without notice. MicroVibes does not warrant that the Attachment Interceptor will detect, alert on, or replace every PDF attachment without interruption or error.
  • 5.4 Pro Subscriptions, Hardware Seat Locks & Billing: Paid Pro plans are billed and fulfilled via Polar.sh as Merchant of Record and may be cancelled anytime for future billing periods via your Polar customer portal. License keys are non-transferable and cryptographically locked to the first 1 unique hardware device (1-Week Only) or 3 unique hardware devices (Monthly and Annual plans) via deviceHash.
  • 5.5 No Legal Advice & "AS IS" Warranty Disclaimer: Nothing in the Software or documentation constitutes legal or compliance advice. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROVIBES PROVIDES THE SOFTWARE "AS IS" AND "AS AVAILABLE", WITHOUT ANY WARRANTIES, REPRESENTATIONS, OR CONDITIONS OF ANY KIND, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY OR COMPLETENESS OF REDACTIONS, UNINTERRUPTED AVAILABILITY, AND NON-INFRINGEMENT.
  • 5.6 Maximum Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL MICROVIBES, ITS OWNER(S), FOUNDER(S), AFFILIATES, LICENSORS, OR SERVICE PROVIDERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, OR DATA, DATA BREACH NOTIFICATION OR REMEDIATION COSTS, THIRD-PARTY CLAIMS, OR REGULATORY OR ADMINISTRATIVE FINES OR PENALTIES (INCLUDING UNDER GDPR, UK GDPR, CCPA, OR HIPAA), ARISING OUT OF OR IN CONNECTION WITH THE SOFTWARE OR ANY MISSED, INCOMPLETE, OR FAILED REDACTION, UNDER ANY LEGAL THEORY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE), EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROVIBES' TOTAL CUMULATIVE LIABILITY FOR ALL CLAIMS IN THE AGGREGATE SHALL NOT EXCEED: (A) FOR ACTIVE PAID PRO USERS, THE FEES ACTUALLY PAID BY YOU FOR THE SOFTWARE IN THE THREE (3) MONTHS (OR SINGLE ACTIVE BILLING TERM, IF SHORTER) IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (B) FOR FREE-TIER USERS, EUR €0.00 (OR, SOLELY WHERE MANDATORY LAW PROHIBITS A ZERO-EURO LIABILITY CAP, EUR €10.00).
  • 5.7 User Indemnification: To the maximum extent permitted by applicable law, you agree to defend, indemnify, and hold harmless MicroVibes and its owner(s), affiliates, and service providers from and against any third-party or regulatory claims, demands, investigations, fines, damages, liabilities, and reasonable legal fees arising out of or relating to: (a) your failure to visually inspect and verify exported PDFs before sharing or sending; (b) any data leak, privacy violation, or unauthorized processing or branding of documents (including candidate CVs, client files, or financial/medical records); or (c) your breach of these Terms.
  • 5.8 Governing Law (The Netherlands), Exclusive Jurisdiction & Severability: These Terms and any dispute or claim arising out of or relating to the Software or MicroVibes are governed exclusively by the laws of The Netherlands (excluding conflict-of-law rules and the UN CISG). All disputes shall be submitted to the exclusive jurisdiction of the competent courts in The Netherlands, without prejudice to mandatory statutory consumer rights strictly required by your country of residence where you act as a consumer. Where permitted by law, claims must be brought solely in an individual capacity (not in any class, collective, or representative action) and within twelve (12) months after the cause of action arises. If any provision of these Terms is held invalid or unenforceable, that provision shall be enforced to the maximum permissible extent (or reformed to achieve the closest lawful protection for MicroVibes), and the remaining provisions shall remain in full force and effect.