Transparency
This page explains exactly what happens when you use Pandoo, what loads from other companies and how you can check it yourself.
What happens to your files and numbers
Every tool runs in your browser. Files you choose are read by your browser, processed in your device's memory, and the result is created on your device. Nothing you type or upload in a tool is sent to us or to anyone else. There are no accounts. Some tools keep your settings or a draft in your browser's local storage, only on your device.
Check it yourself
- Offline test: open any tool, then turn on airplane mode or turn off Wi-Fi. The tool keeps working, because it never needed a server. (The text reader downloads its language model the first time you use it; after that it works offline too.)
- Network test: on a computer, press F12, open the Network tab and use a tool. You'll see no request carrying your file or your numbers.
What loads from other companies
| Service | Why | When |
|---|---|---|
| Google Analytics 4 | Count visits and see which tools are used | Cookies only after you click "Accept"; otherwise anonymous signals without cookies |
| Google AdSense | Show ads that keep the tools free | When ads are active; follows your cookie choice |
That's the complete list. Fonts, scripts and libraries are served from pandoo.pro itself.
Security measures
- HTTPS on every page, enforced by the browser (HSTS).
- A Content Security Policy that only allows scripts from pandoo.pro and the Google services above. One exception: the HEIC converter page lets its image decoder compile code inside the browser, which that decoder requires. It still runs entirely on your device.
- Camera, microphone, location and payment access are switched off for the whole site.
- No forms send data to us, and no code is loaded from third-party CDNs.
Open-source software we use
- pdf-lib — MIT License
- PDF.js (Mozilla) — Apache License 2.0
- Tesseract.js and Tesseract language data — Apache License 2.0
- heic2any — MIT License
- qrcode-generator — MIT License
- Fonts: Bricolage Grotesque, Instrument Sans and Caveat — SIL Open Font License 1.1; Homemade Apple — Apache License 2.0
Independence and funding
Pandoo is maintained independently by Pietro Christe with his own resources, plus advertising and voluntary support on Patreon. No investor, sponsor or partner company influences the tools or their results. We don't sell data — and we don't have any to sell.
Report a problem or a vulnerability
Write to contato@pandoo.pro. Security reports are handled first. Our contact details for researchers are also in security.txt.
Last updated: 2026-10-21