Accounts and membership
Email accounts store a one-way password hash and receive verification and recovery links through our email delivery service. Email verification is required. Google sign-in requests basic profile details, not Gmail messages or Drive files. Secure cookies maintain sessions for up to 30 days; connection details may be recorded to protect accounts. We store your account ID, name, email, membership and payment records, usage allowances and review requests. Chosen presets include processing options and watermark text. Records are kept to provide the service and review payments; required financial records may be retained. Card data is entered with Ziina and not stored by us. Documents remain on your device. AI summaries are currently unavailable.
Document privacy and usage analytics
Updated October 18, 2026.
Your documents stay on your device
Waraq PDF reads and processes files in your browser. Documents, filenames and document text are not uploaded or retained. No external AI services are used. Fonts, libraries and OCR models are hosted on this site. Closing the tab clears the local working session.
Optional analytics
Only after you agree, we send page views, tool opens and operation successes or failures to this site. We do not send error details or document contents. A random browser identifier is stored locally; the server stores a monthly rotating hash to estimate daily and monthly unique browsers. We record a coarse device category and referring domain only, without referrer paths or search terms. Analytics is not linked to your account or email. The signed-in site owner is excluded.
Retention and control
Daily deduplication records are retained for up to 90 days; monthly records and aggregate counters for up to 13 months. A temporary network-address hash limits abuse for up to two days, without storing the original address. Cleanup runs periodically when new events arrive. Hosting services process connection information needed to serve and secure the site under their own policies.
All tools work if you decline. Use “Analytics settings” to change your choice at any time. Withdrawal removes your local identifier and stops future collection; it does not remove previously aggregated counts, which we cannot subsequently link to you. Your consent choice and any language preference are stored locally. Counts estimate consenting browsers, not every person.