Cookie Policy

Current browser storage

The audited Angular application uses browser local storage—not an application-set authentication cookie—to retain a signed-in user’s access token and basic account record. It also stores a recent local list of job identifiers, tool names, statuses, timestamps, and output identifiers. Clearing site data removes these records and signs the browser out.

Your PDFWhirl preferences

The site offers Accept all, Reject non-essential, and Manage preferences controls. The saved choice records whether optional analytics and advertising storage is allowed. Essential storage remains active because it supports sign-in state, recent jobs, and the preference record itself. No analytics or advertising scripts were installed when this policy was reviewed, so allowing an optional category does not by itself load one.

Essential cookies

No first-party cookie set directly by the audited Angular code was identified. Railway and Cloudflare provide hosting, site-delivery, and storage infrastructure and may use essential mechanisms for routing, security, or abuse prevention outside this codebase. Their actual production cookie and edge behavior must be rechecked before publication.

Authentication, job history, and temporary state

Authentication state and recent job history are stored in local storage. The browser entry point may set a temporary session-storage flag while unregistering an obsolete service worker and clearing its old caches; that flag is not an advertising identifier and normally ends with the browser session. No separate language, theme, or other preference cookie was found.

Analytics

No Google Analytics integration was found in the audited frontend. Analytics must not be described or enabled without updating this policy and adding any consent control required by applicable law.

Advertising

No Google AdSense script was found in the audited frontend. If advertising is introduced, Google and other advertising providers may use cookies or similar technologies. PDFWhirl's preference panel is not represented as a Google-certified consent management platform. Before serving ads in the EEA, United Kingdom, or Switzerland, the owner must configure a Google-certified TCF consent platform. U.S. state opt-out messages and other country or regional requirements must also be configured as applicable before activation.

See Google’s current CMP requirements for the EEA, United Kingdom, and Switzerland and configure the applicable AdSense Privacy & messaging programs before loading ads.

Your controls

You can clear local storage and cookies through browser settings and can block storage in many browsers. Blocking required storage may prevent sign-in from persisting. You can also reopen Cookie preferences from the footer to change optional choices with the same ease used to grant them.

Contact

See the Contact page or email support@pdfwhirl.com.