Privacy policy

Last updated: 8 November 2026

The short version

Featherlight is built so we see as little of your data as possible. Your PDFs are processed in your browser. There are no accounts: we store your license key and the devices you activate with it. That's the business.

Your documents

Every feature, including OCR, compression and flattening, runs on your own device. Your files never reach our servers. Recent-file thumbnails, signatures and autosave snapshots are stored in your own browser (IndexedDB) and never transmitted. When you first use an OCR language, your browser downloads that language's data from our site; the request carries no file content.

License data we store

Your license key, its tier, where it came from (AppSumo, Stripe or a grant) and when it was activated
For each device you activate: a random device id the app creates, a name such as "Chrome on Windows", and when it was activated and last used
The country each device connects from, one entry per day, kept so we can spot a license key being shared publicly. A person reviews anything unusual; nothing is decided automatically

No email address, no password, no name. No advertising trackers and no third-party analytics scripts.

We use this data to run your license, which is what you buy from us (performance of a contract), and to meet accounting duties.

Service providers

Cloudflare carries all traffic to our site and runs the license service, so the license data above is stored with Cloudflare (its D1 database). Your documents are never part of that traffic.

Some of these providers operate outside the EU and rely on the safeguards GDPR requires for such transfers.

Payment processors

Payments run through Stripe or AppSumo. Card details go to them directly and never touch our servers. Their privacy policies apply to the payment itself: Stripe, AppSumo.

Your rights (GDPR)

We're based in the Netherlands, so GDPR applies to everyone we serve. Email [email protected] to access, correct or delete your data; include your license key so we can find it. Deleting removes your devices and connection history; the license record itself we must keep for accounting. We answer within 30 days, usually much faster. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Data controller

FalcoX AI (FutureCoda), Eindhoven, the Netherlands — [email protected]