Last updated 6 November 2026

Privacy

OpenDocScan collects nothing about you and nothing about what you scan. That is not a policy we are choosing to follow — it is a consequence of how the product is built, and the rest of this page is the detail behind that claim.

What we collect

Nothing. Specifically:

• No account, unless you choose one. Nothing in the scanner is behind a sign-in and you never have to create one. If you do sign in — which exists so credits carry across our apps — our account server holds what you gave the provider you signed in with, and nothing else. It never receives a document, a page, or anything derived from one. The Android app has no sign-in at all.
• No documents. The images you scan and the PDFs you build never leave your device. There is no upload step, and no server of ours that could receive one.
• No third-party analytics. No advertising pixel, no cookie, no fingerprinting, no third-party embed — on this site or in the app. How many people open this page is counted, by us and on our own server; see what this website logs.
• No advertising. Nothing here is sold to anyone, because there is nothing collected to sell.

Where your documents live

In your browser's own storage, on the device you scanned them with. The app asks the browser to make that storage persistent and tells you whether the browser agreed. Clearing your browsing data for this site deletes your library, and we cannot recover it — we never had a copy.

Because the storage is per-browser, your documents do not sync to your other devices. That is the trade for not having an account.

How you can check this yourself

This is the part most scanner apps cannot offer. Open your browser's developer tools, switch to the Network panel, and use the app. You will see the app's own files and its text-recognition data load from this site or from your browser's cache, and no request that carries a document, a page image, the recognised text or a file name.

Three mechanisms make that true, in order of how hard each is to subvert:

• The scanning core is a WebAssembly module compiled from Rust with no HTTP client and no networking dependency. There is no code path from it to a network.
• The text-recognition engine and its language model are served from this site. Left at their defaults they would be fetched from a public CDN, which would tell a third party each time you scanned a document.
• A service worker intercepts every request the page makes and answers anything addressed to another origin with a 403 rather than forwarding it. A future dependency that tried to phone home would break loudly instead of working quietly.

The automated test suite asserts the same thing on every run: it records every request the app makes while driving a complete scan, and fails if any of them leaves the origin.

The Android app

The Android app follows the same rules as the scanner in your browser, and Android itself enforces them.

• No internet permission. The app does not request Android's INTERNET permission, so the system does not let it open a network connection at all. You can confirm this on the app's page in Google Play under “About this app” → “App permissions”, or in your phone's settings under Apps → OpenDocScan → Permissions.
• One permission: the camera. It is used only while you are photographing a page, and you can refuse it and import photos instead.
• Text recognition is built in. The English recognition model ships inside the app, so nothing is downloaded when you scan.
• No account. There is no sign-in in the Android app.
• Where your pages live. Pages you are working on stay in the app's private storage on your phone, which other apps cannot read. Uninstalling the app, or clearing its storage in Android settings, deletes them. A PDF you save goes to the folder you pick; a PDF you share goes to the app you pick, and from then on that app's own privacy terms apply.
• What Google Play sees. Google Play handles the download and updates, and tells us how many people installed the app. If you have chosen to share usage and diagnostics with app developers in your Android settings, Google may also pass us anonymous crash reports. These come from Google, not from the app, and never contain a document.

What this website logs

The web server that hands you this page keeps ordinary access logs — the requested path, a timestamp, the site that linked here (its name only, not the full address), the browser's user-agent string and the connecting IP address — for a short period, to keep the server running and to spot abuse. They are not used to build a profile of you, are not combined with anything else, and are not shared. Nothing in them is connected to what you scan, because what you scan is never sent here.

Page views on this site are also counted by a self-hosted, privacy-preserving analytics service. It sets no cookie, records no personal data, and does not follow you to other sites. It never sees a document, and the scanner itself contains no analytics of any kind.

Children

The app is not directed at children and collects no personal information from anyone, of any age.

Changes

If this policy changes, the date at the top of this page changes with it. Since the product holds no data, a change here cannot retroactively expose anything you have already scanned.

Contact

Questions about this policy: hello@opendocscan.com.