Web Hosting Privacy Notes

Do not store document files in cookies. Cookies are too small and are sent to the server with requests.

Use browser memory / IndexedDB / OPFS for browser-side work. Use a private server temp folder only when intact Word conversion through LibreOffice/MS Word/server engine is required.

Current converter temp configuration

• Mode: system
• Description: PHP system temporary folder, normally outside the public web directory
• Detected base temp folder: /tmp/pdf_privacy_editor_converter
• Old job cleanup: 60 minutes

Recommended deployment

For public hosting, keep normal PDF editing browser-side. For Word conversion, give the user a clear choice:

• Private local utility: best for local XAMPP/university intranet computers where Microsoft Word or LibreOffice/OpenOffice can be installed.
• Server-side converter: only for trusted/private hosting where a safe conversion engine is available and temporary files are deleted immediately.
• Browser-only Word fallback: removed because it does not preserve embedded images, tables, headers/footers or page layout.

Server-side converter rules

• Use HTTPS.
• Store temp files outside public web folders where possible.
• Use random job folders.
• Delete the uploaded Word file, generated PDF and job folder after conversion.
• Run scheduled cleanup for abandoned jobs.
• Do not store original filenames or document contents in logs.
• Show a user-visible privacy warning before server-side conversion.

Back to editor | Check converter | Install/setup utility