Your files are your files.
Fold PDF is a free browser tool operated by ksana-opc. Your PDFs and filenames are processed on your device, without an account or file upload.
Documents and downloads
We read only the files you select or drop into the page. They are used to create previews and a merged PDF in this tab. The app does not send documents, filenames or your output filename to a server. It does not store them in localStorage, IndexedDB or a database.
Clear all removes the selected file and preview references. Reordering, removing or adding files invalidates the old result. Closing or reloading the tab ends the session. Downloads you save remain on your device and are under your control.
Website requests
Cloudflare hosts the website and its code, rendering resources and fonts. Ordinary requests can include IP address, browser information, requested path and referrer information. These are separate from the PDFs you select. See Cloudflare’s privacy policy for its handling of service data.
Analytics and referral information
Advertising scripts remain disabled. Optional merge-activity statistics are off by default and require the checkbox on the merge page; see below. Separate page-visit and performance statistics load automatically on our four content pages. Normal content pages suppress Cloudflare’s automatic analytics injection; an extra Cloudflare script can still appear on missing-page responses, where our Content Security Policy blocks its execution. We have not completed a full runtime network audit. The app writes one small item to sessionStorage inside this tab: a source category such as “chatgpt”, “perplexity” or “unknown”, whether it came from a recognized URL parameter or referrer, the tool page path, and counts of tool loading, files becoming ready, merge attempts, generated results, merge failures, cancellations, input rejections and download clicks. A generated result does not mean you saved the file. These counts contain no file details or error text. It does not store the raw referrer URL, arbitrary parameters or file information. A second bounded diagnostic keeps up to 100 local events: merge start, generated output, failure or cancellation, file reordering, input error categories and a download click. A random ID relates one merge attempt in memory for up to 30 minutes; that ID is not written to sessionStorage. There is no long-term or cross-site visitor ID. Durations are grouped into broad ranges. Raw errors, input values, file details and full URLs are excluded. Repeated completion signals and repeated download clicks for the same result are counted once in this event log. Both diagnostics remain inside this tab and are not transmitted; they do not provide site-wide traffic statistics or evidence of real AI referrals.
Page visits, sources and performance
We use one official Cloudflare Web Analytics script on pdfgather.com content pages to understand page visits, referring sites and browser performance. This is separate from the optional merge-activity checkbox, which does not control page-visit statistics. The script does not read your selected PDFs or filenames, and we do not send form inputs to it. The reviewed script version cleans query strings and fragments from the page and referrer URLs before reporting; the site does not use those parameters as analytics dimensions. We have checked the current script and synthetic requests, not every future vendor update.
Cloudflare describes this service as using no analytics cookies or persistent browser identifiers. It still receives the browser connection and performance information. Blocking the script or its requests can prevent counting; the PDF merger remains usable. Visit/source reports are not joined to merge-task identifiers and do not establish a channel-specific completion rate. See Cloudflare’s collection description and service privacy policy.
Optional usage statistics
The merge page has an unchecked, optional “Share merge activity for this tab” box. If you turn it on, new merge attempts can send a start, generated-result, failure or cancellation event, plus the first download click. Turning it off stops future reports and pending sends where possible; already accepted records are not recalled. Reloading or leaving resets the choice. The PDF merger works without it.
Each request contains only a fixed site/page code, event, a random identifier for that merge attempt, a broad duration range, a fixed error category and a test/non-test flag. The identifier is eligible for reporting for 30 minutes in this tab; it is not a visitor identifier and is not persisted in browser storage. No PDF bytes, filenames, input values, raw errors, URLs or referrers are sent in these event payloads. A generated result or a download click does not confirm a saved file. We do not join these events to referral data.
Accepted records are stored in a separate Cloudflare D1 database. Daily cleanup is configured to remove event records older than 24 hours (normally within about 48 hours if cleanup succeeds) and keep daily totals for 90 days, with up to one extra cleanup interval. Live scheduled cleanup has not yet been observed; these are configured targets, not verified deletion guarantees. Cloudflare recovery can retain deleted data for another 7 days. We disable application request/body logs and traces, but Cloudflare still processes connection metadata such as IP addresses under its own service policies. Reporting can be incomplete because of consent, browser settings, network failures or service limits.
Current service limits
The website at pdfgather.com includes a public Google AdSense account-verification tag and ads.txt file. These identify the publisher for verification; they do not load advertising scripts or display ads. Advertising remains disabled pending approval and a separate activation step. There is no account, payment or subscription. We do not guarantee that every PDF structure or device will work; review the output before relying on it. See supported documents and limitations.
Operator and feedback
Fold PDF is maintained by ksana-opc. For technical feedback, describe the browser, the error and a synthetic example; do not share confidential documents or personal signatures.
Last reviewed: September 16, 2026