Last updated 8 September 2026

Privacy

OpenDocScan collects nothing about you and nothing about what you scan. That is not a policy we are choosing to follow — it is a consequence of how the product is built, and the rest of this page is the detail behind that claim.

What we collect

Nothing. Specifically:

• No account. There is nothing to sign up for, so we hold no name, no e-mail address and no password.
• No documents. The images you scan and the PDFs you build never leave your device. There is no upload step, and no server of ours that could receive one.
• No analytics. No tracking script, no pixel, no cookie, no fingerprinting, no third-party embed — on this site or in the app.
• No advertising. Nothing here is sold to anyone, because there is nothing collected to sell.

Where your documents live

In your browser's own storage, on the device you scanned them with. The app asks the browser to make that storage persistent and tells you whether the browser agreed. Clearing your browsing data for this site deletes your library, and we cannot recover it — we never had a copy.

Because the storage is per-browser, your documents do not sync to your other devices. That is the trade for not having an account.

How you can check this yourself

This is the part a native scanner app cannot offer. Open your browser's developer tools, switch to the Network panel, and use the app. After the page and its resources have loaded, scanning, recognising text and exporting a PDF produce no further requests at all.

Three mechanisms make that true, in order of how hard each is to subvert:

• The scanning core is a WebAssembly module compiled from Rust with no HTTP client and no networking dependency. There is no code path from it to a network.
• The text-recognition engine and its language model are served from this site. Left at their defaults they would be fetched from a public CDN, which would tell a third party each time you scanned a document.
• A service worker intercepts every request the page makes and answers anything addressed to another origin with a 403 rather than forwarding it. A future dependency that tried to phone home would break loudly instead of working quietly.

The automated test suite asserts the same thing on every run: it records every request the app makes while driving a complete scan, and fails if any of them leaves the origin.

What this website logs

The web server that hands you this page keeps ordinary access logs — the requested path, a timestamp, the browser's user-agent string and the connecting IP address — for a short period, to keep the server running and to spot abuse. They are not used to build a profile of you, are not combined with anything else, and are not shared. Nothing in them is connected to what you scan, because what you scan is never sent here.

Children

The app is not directed at children and collects no personal information from anyone, of any age.

Changes

If this policy changes, the date at the top of this page changes with it. Since the product holds no data, a change here cannot retroactively expose anything you have already scanned.

Contact

Questions about this policy: opendocscan@proton.me.