Who is responsible for your data
Free Printable PDFs, the operator of freeprintablepdfs.com, decides how and why the personal data described here is processed, and is the data controller for the purposes of data protection law. You can reach us about anything in this policy through the contact page, choosing the reason that fits your request.
What we collect
Account data: your name, username, email address, hashed password, profile bio and the date you joined. Contributions: PDFs and cover images you upload, the source notes you supply, your reviews and ratings, your saved items and who you follow. Messages: anything you send through the contact form, including your name, email address and the message itself. Reputation: the points you have earned and the events that granted them. Technical data: server logs containing IP address, browser identification and the pages requested, kept for security and abuse prevention.
Why we process it, and on what basis
To run your account and let you download, contribute and comment — because that is the contract between us. To moderate submissions and reviews, prevent abuse, keep the service secure and enforce our terms — because we have a legitimate interest in a safe and honest library. To answer your messages — because you asked us to. To show advertising — described below, and based on your consent wherever consent is legally required. To meet legal obligations, such as responding to a valid rights complaint or a lawful request.
What other people can see
Public: your name, username, profile bio, joining date, published printables, approved reviews, follower and following lists, and your points and level on the contributors board. Never public: your email address, your password, your contact messages and your technical logs. We do not sell personal data, and we do not share your email address with advertisers.
How long we keep things
Account data is kept while your account exists. Contact messages are kept for two years so we can see the history of a request. Server logs are kept for up to twelve months. Moderation records — what was decided and why — are kept while the related content exists, so a decision can be reviewed. When you delete your account we remove your profile, email address and messages. Printables you published may remain in the library, because other people rely on them; ask us and we will show them without your name.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict what we do with it, or to object to processing we base on legitimate interests. You can also ask for your contributions in a portable form. Much of this is immediate: update or delete your account in your account settings. For anything else, write to us through the contact page and we will respond within one month. If you are in the UK or EEA and are unhappy with our answer, you may complain to your national data protection authority.
Security
Passwords are stored hashed, never in readable form. Provider API keys are encrypted at rest. Uploaded files are served through our own authorisation checks rather than from a public folder, and private material is never cached by browsers or intermediaries. No system is perfectly secure. If a breach ever affects your data we will tell you and the relevant authority as the law requires.
International transfers
Our hosting and the advertising networks we work with may process data outside your country. Where that happens we rely on the safeguards those providers offer, such as standard contractual clauses or an adequacy decision.
Children
The service is not directed at children under 13 and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We update this policy when our practices change. The revision date at the top of the page shows the most recent version, and significant changes will be signposted on the site.