Last updated: July 16, 2026
Only what the site needs to work: a session cookie (betterpdf-session) that keeps you signed in and ties your uploads to your browser session, and a CSRF token cookie (XSRF-TOKEN) that protects forms against cross-site abuse. Both are first-party and expire after two hours of inactivity.
The consent banner stores your choice in your browser's local storage (bpdf-consent) — it never leaves your device. Analytics cookies are off by default and are only ever set if you choose "Allow analytics". At the moment no analytics are deployed at all, so both choices currently behave the same.
Cloudflare may set technical cookies for security purposes (e.g. bot protection). We set no advertising cookies.