Thoma Tools / Privacy
Your files. Your business.
Temporary document processing. No retained files or reports. Clear choices for advertising cookies.
Privacy
Updated 3 October 2026
Text to outlines
Only a deliberate conversion action sends your PDF to this server, without its filename. The application temporarily converts supported text to vector paths in memory and returns a separate PDF and count report. It saves neither input, output nor report to files, a database or logs. Clear, cancellation, leaving the page or changing language releases the page data and download links; server processing may finish after a browser cancellation. Deliberately downloaded files remain on your device.
Who operates this website
Thoma AG, Friedensgasse 1, 4056 Basel, Switzerland. Questions: info@thoma-druck.ch.
PDF inspection
When you choose “Inspect PDF”, the PDF bytes are sent to this website and analyzed by CompanyPDF on our server. The filename stays in your browser. The application does not save the PDF, metadata or report to files, a database or logs. Request data is released when the request ends. Your original PDF is not edited.
Letter addressing
The letter PDF and CSV/TSV address list are prepared in your browser. Generating a proof or the full batch sends the PDF, mapped addresses and placement settings to this server. Document processing takes place temporarily in memory and retains neither its inputs nor output. Filenames are not sent. Clear, leaving the page or changing language clears the current input and results. Downloaded PDFs remain on your device. The separate, deliberate Pro schema save action retains settings as described below; it does not save PDFs or recipient lists.
Address labels
Address text and TXT/TSV files are prepared locally in the current page. The export button sends selected address lines and layout settings to this server. CompanyPDF generates the label PDF temporarily in request memory; addresses and resulting PDFs are not retained. Filenames are not sent. Clear, leaving the page or changing language clears page data and its download link. Downloaded PDFs remain on your device. A separate, deliberate Pro save action retains layout settings, without recipient lists.
The report in your browser
The report is shown only in the current page. Clear it to remove the selected file and results from this page. Changing language or leaving the page clears the view. Documents and reports are not written to browser storage, account history or a document archive.
Website visits and hosting
Account pages use necessary security and sign-in cookies. Public tool pages use Google's consent manager to explain advertising purposes, record your choices and let you change them through Privacy and cookie settings in the footer. Advertising cookies are not classified as required login cookies. Google receives technical visitor information, such as IP address and browser information, when its service loads. We use no separate analytics service. If you dismiss the ad-block reminder, one browser session-storage preference remembers that choice until the tab session ends. It contains no document or account data. Hosting-specific details will be added before public launch.
Optional accounts
If you register, we store your email address, a password hash, your account role and state, and account creation/update times. Sign-in tokens are stored only as hashes and expire after 12 hours. Failed sign-ins update a temporary retry counter on that account; no IP address or request history is stored. Password changes revoke other sign-ins. Email addresses are not marked verified without verification. Account data remains until deletion, subject to necessary billing-record retention; contact info@thoma-druck.ch for deletion. Registration never creates a PDF or report history.
Saved schemas and Pro access
With active Pro you can explicitly save named label and letter schemas in your account. We store layout, typography, column mappings, barcode and overlay placement, extra text boxes and output options, with an owner, revision and timestamps. Schema names and fixed text you type into mappings are retained too. PDFs, filenames, recipient lists and generated files are not saved. Signing in never automatically saves current work. Schemas remain until you delete them or your account is deleted, including after Pro expires. Without active Pro you can still see their names and delete them from your account, but cannot load, save or rename them. Deletion removes the live record; hosting backups have separate retention. Administrators can manage account access but are not given a schema-content viewer.
Admin font library
Fonts deliberately uploaded by an administrator are retained privately for use by PDF tools, together with their filename, font details, upload time and administrator ID. Administrators can remove fonts from the library. This storage is separate from temporary visitor PDF inspection.
Advertising and paid access
PDF inspection and previews remain free. Free exports prepare your files, then open a results page in the same tab. An available Google Offerwall ad can grant one page view of that page, which contains the prepared files and preview. Google manages the ad, page-access entitlement and related storage. If no ad is available or Google cannot load, the download links remain usable. A temporary browser worker passes prepared files to the results page in browser memory, without server storage or document information in the page URL. Browsers without support for that handoff keep direct downloads on the tool. Leaving or reloading the results page clears its files. Returning to the tool starts a fresh visit. Verified Pro subscribers and active authenticated administrators download directly without advertising. Declining personalised advertising is separate from choosing to view an ad. Google is the selected advertising provider; its consent manager discloses the applicable purposes and partner information. Personalised advertising requires consent. Eligible limited ads may use technical data and storage for fraud prevention without personalising ads. Wide screens can show banners beside the page, with additional pairs where longer pages have room. Smaller screens can show one compact banner between the introduction and the main content. Placements load near the visible part of the page and are not automatically refreshed. Ad requests wait until Google has determined your consent choices; Google then decides which ads are eligible. If the consent service is blocked or unavailable, the tools remain usable. We do not attach PDF contents, filenames, reports or address-list inputs to advertising or consent requests. Google can detect ad blocking; our own supplementary check only checks whether an empty advertising element is hidden. Verified active paid subscription access omits advertising and Google messaging scripts. PDF and recipient-list storage are not available.
Subscriptions and payments
Registration is for a CHF 5.00 monthly subscription, including applicable VAT, with automatic renewal. An incomplete signup stores a pending login so you can finish payment; it does not grant subscriber benefits. SumUp handles card entry, card verification and payments; its checkout and your bank process the information needed for payment and authentication, including technical browser and network data. The SumUp card form loads only on the subscription checkout page. We store an opaque SumUp customer reference, an encrypted payment token, checkout and transaction references, amounts, currency, consent version and time, payment status, paid periods and cancellation time. We never store card numbers or security codes. A temporary bank-authentication payload may be stored encrypted until the payment resolves. Raw provider callbacks are not retained. Cancel automatic renewal from your account; paid access continues until the paid period ends. Failed charges are not automatically retried. Required billing records may need to remain after account deletion; contact info@thoma-druck.ch for deletion and billing-record enquiries. Your documents, addresses and schemas are not sent to SumUp.
Contact and external links
If you contact us by form, email or phone, we receive the information you choose to provide. The contact form sends your name, email address and message through our email provider to our inbox only when you choose Send. We keep this as correspondence to handle your enquiry; the provider also processes the message. The website does not save a copy or attach PDFs or tool data, and the contact handler creates no sessions, cookies or application logs. This is separate from anonymous tool use. External websites are contacted only when you follow their links. For information, correction or deletion of data you provided to us, contact info@thoma-druck.ch.
Unlock PDF
Attempt to unlock sends your PDF to this server without its filename. CompanyPDF processes it temporarily and returns a separate file. The application saves no input, output or processing history. No password is requested. Clear and leaving the page release page data and download links; server processing may finish after cancellation. Files you download remain on your device.
PDF upload limits and paid access
Free use accepts PDFs up to 50 MB each (50,000,000 bytes), including letter templates and overlays. An active, verified paid subscription removes this website limit. PDF requests can send your existing sign-in cookie to this website. For a PDF over 50 MB, the server reads your account and subscription to verify paid access. It creates no new cookie or session and saves no document data or processing history against your account. Hosting resources still apply.
How Google uses information from sites that use its services