Privacy policy
In short:
- Your files are never uploaded. Every tool runs in your browser, on your device. We never receive, see or store your documents.
- No account, no ads, and we never sell information.
- Google Analytics only runs if you choose Allow, and never receives file names or contents.
1. Who is responsible
Plainpage (plainpage.novasite.co.za) is operated by Nova Site, Pretoria, Gauteng, South Africa. Nova Site is the responsible party under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA), and the controller under the General Data Protection Regulation (GDPR) and UK GDPR, for the limited personal information processed through Plainpage. Our Information Officer is Ryno Kahl, reachable at info@novasite.co.za or +27 75 947 9549.
2. Your documents
When you use a tool, your browser opens the file from your device, Plainpage’s code (running in your browser) processes it, and the result is saved straight to your device. Your documents, their contents, their names and any passwords you type are never sent to us or anyone else. We have no copy, so there’s nothing for us to keep, share or lose.
The only exception is one you control: if you choose to remember a signature, it is stored in your own browser (see below), still not on any server.
3. Information stored on your device
| Name | What it holds | How long |
|---|---|---|
pp:theme | Whether you chose light or dark mode | Until you delete it |
pp:consent | Whether you allowed analytics | Until you delete it |
pp:sigs | Signatures or initials you chose to remember (only if you ticked “Remember on this device”) | Until you delete them |
| Handoff storage (IndexedDB) | A finished file you send to another tool with “Continue with”, so you don’t have to add it again | Deleted as soon as the next tool opens it, and ignored after 30 minutes |
| OCR language data (IndexedDB) | The text-recognition models, saved after first use so they don’t download again | Until you clear site data |
| Offline cache | Copies of Plainpage’s pages and code, so it loads fast and works offline | Replaced when the site updates |
This information stays on your device and is never sent to us. It’s needed for the features you use, so it doesn’t require consent. You can delete saved signatures from the signature window, or delete everything by clearing this site’s data in your browser settings.
4. Information our web host receives
Like every website, Plainpage’s pages are delivered by a web server. When your browser requests a page or a piece of code, our hosting provider automatically receives standard technical information: your IP address, browser type, the address requested, the referring page, and the date and time. It never receives your documents. This information is used only to deliver the site, keep it secure and fix problems, and is kept in server logs for a limited period. Our basis is our legitimate interest in running a secure website (POPIA section 11(1)(f); GDPR Article 6(1)(f)).
5. Google Analytics, only if you allow it
On your first visit, we ask whether you allow analytics. Nothing from Google is loaded until you choose Allow. If you choose No thanks, Google Analytics is never loaded and no analytics cookies are set.
If you allow it, we use Google Analytics 4, a service provided by Google, to count visits and see which tools are used, so we can improve Plainpage. Google Analytics collects the pages you view, how you arrived, how long you stay, your device and browser type, and your approximate location (country or city). Google states that Google Analytics 4 does not log or store IP addresses. It uses a random identifier in cookies so repeat visits can be counted.
When you finish using a tool, Plainpage also sends one event with the tool’s name and rounded counts: how many files (for example 2–5), their total size range and how long it took. We never send file names, file contents, page text or passwords. Google signals and ad personalisation are switched off, and we don’t use analytics for advertising.
| Cookie | Purpose | Expires |
|---|---|---|
_ga | Distinguishes visitors | 2 years |
_ga_<ID> | Keeps track of the current session | 2 years |
Legal basis: your consent (POPIA section 11(1)(a); GDPR Article 6(1)(a)). It’s voluntary, and every tool works the same if you say no.
Changing your mind: use Analytics settings at the bottom of any page. Switching it off removes the analytics cookies. You can also block cookies in your browser or install Google’s opt-out browser add-on.
Retention: analytics data is kept for no longer than 14 months, after which Google deletes it. Google processes it for us as our service provider. You can read how Google uses information from sites that use its services.
6. If you contact us
If you email us, we receive your email address, name and whatever you write, and use it only to reply. Email is handled by our email provider. We keep messages for as long as needed to deal with them.
7. Who receives information
We don’t sell, rent or trade personal information. The only parties that receive any information through Plainpage are our hosting provider (server logs), Google (only if you allow analytics), our email provider (only if you email us), and authorities where the law requires it.
8. Transfers outside South Africa
Our hosting provider, email provider and Google may store and process information outside South Africa, for example in the European Union or the United States. They are bound by data protection terms giving protection comparable to POPIA. For analytics, the transfer is also based on your consent (POPIA section 72). Your documents are never transferred anywhere.
9. Children
Plainpage can be used by anyone and its tools don’t collect personal information. Under POPIA, a child is anyone under 18, and a child’s personal information may only be processed with a parent or guardian’s consent. If you’re under 18, please ask a parent or guardian before allowing analytics, or choose No thanks.
10. Your rights
You may ask whether we hold personal information about you and for a copy, ask us to correct or delete it, object to its processing, and withdraw consent at any time. In the European Economic Area and United Kingdom you may also ask us to restrict processing or for your information in a portable format. Plainpage has no accounts, and analytics data is linked to a random identifier rather than your name, so we usually can’t match it to a person. You can always cut that link by switching analytics off.
To make a request, email our Information Officer at info@novasite.co.za. We’ll respond within 30 days. If you’re unhappy with how we handled your information, please tell us first so we can put it right. You may also complain to the Information Regulator (South Africa): inforegulator.org.za (complaints are lodged through its online portal), enquiries@inforegulator.org.za, 010 023 5200. In the European Economic Area or United Kingdom, you can complain to your local data protection authority.
11. Security
Plainpage is only served over HTTPS. Because your documents never leave your device, they can’t be exposed by a breach of our systems. Anything stored in your browser can be seen by anyone with access to your device and browser profile.
12. Changes
We’ll update this page if anything changes, and change the date at the top. If we ever start collecting new kinds of personal information, we’ll ask for your consent where the law requires it.
13. Contact
Information Officer: Ryno Kahl
Nova Site, Pretoria, Gauteng, South Africa
info@novasite.co.za · +27 75 947 9549