You open a file
You choose a PDF from your own computer or phone. hushleaf reads it on your device — it is never copied to us.
How privacy works
Nothing leaves your device. Here is what that means.
Privacy is not a setting in hushleaf — it is how the app is built. This page explains the whole journey of a file, in plain English.
The short version
Open, edit, save — all on your device
There is no upload button, because there is no upload. The file stays with you from start to finish.
You make your changes
Text, highlights, signatures, page rotations and compression all happen in your device’s memory. There is no upload step, because there is no server in the middle.
You save it back
Your finished PDF is saved to your own folder or downloads. Only you decide where it goes.
Private. Fast. Yours.Everything runs on your device. That is why there is nothing to upload, nothing to wait for, and nothing left behind on someone else’s computer.
The simple picture
No server in the middle.
Most PDF websites work like a delivery service: you hand over your file, it travels to their computer, and you hope it comes back safely. hushleaf works like a tool on your own desk. The file never makes the trip.
- Your file is opened by your own browser or app.
- Your changes are made in your device’s memory.
- The saved file goes straight back to your folder.
- No copy is stored for us to see, share or lose.
No internet needed
No account
my-document.pdfOpened on your device
my-document-edited.pdfSaved to your folder
Nothing left our deviceBecause nothing ever left it.
Privacy by default
What we never do
These are not optional settings you have to switch off. They simply do not exist in hushleaf.
No uploads
Your files are never sent to a server — not even briefly.
No account
There is nothing to sign up for and no profile to fill in.
No tracking
We do not use analytics, trackers, pixels or advertising tools.
No ads
No adverts, no sponsored links, no selling your attention.
No outside scripts
The website loads only its own files — no third-party code.
No website forms
There are no forms on this site that send data somewhere else.
If something goes wrong
A recovery copy stays with you.
If the app closes unexpectedly, hushleaf can keep a recovery copy so your work is not lost. That copy is stored on your device only. It is not backed up to us, and it is not uploaded anywhere.
- Recovery copies live in your device’s local storage.
- You can clear the copy when you no longer need it.
- Clearing your browser data removes local copies too.
Crash recovery
A local recovery copy helps after an unexpected close. Nothing is sent to a server.
Works offline
The Windows app works without an internet connection. Your files do not need the cloud.
Passwords stay local
Password-protected PDFs are opened on your device. The password is not sent anywhere.
You are in control
You choose where to save, what to keep, and when to delete your own copies.
This website too
The website keeps the same promise.
We did not add analytics, advertising or tracking to this site. It loads only its own files — including its own font — and it does not use cookies, so there is no cookie banner to click.
There are no forms here that send data anywhere. There are no forms here that send data anywhere.
No analytics
No visitor counts, heatmaps or advertising pixels.
No outside files
Fonts, images and scripts all come from this folder.
No cookies
Nothing is stored in your browser by this website.
You can ask
Write to us with any privacy question. We will answer plainly.
Questions about privacy?
Ask us directly.
If anything on this page is unclear, write to us. A real person will read it.