Last updated: Thursday, November 5, 2026
How OPPE protects your files
OPPE is built so that your documents never have to leave your device. Here is exactly how.
Processing happens in your browser
The PDF engine (.NET and PDFsharp compiled to WebAssembly) runs inside your browser tab. Files are read into the tab's memory and processed there.
There is no upload endpoint
The OPPE server only delivers the app. It has no API that accepts documents, and it rejects any request body larger than 64 KB. The only thing the app reports back is an anonymous counter for the home page: which tool was used and how many documents were processed. No file name, content or IP address is stored.
In-memory streams only
Documents are handled as in-memory streams (MemoryStream). Nothing is written to disk, temp folders, databases or logs.
Memory is wiped after use
When you start over or leave a tool, file buffers are overwritten with zeros and released.
Advertising (only with your consent)
OPPE is free because it shows ads served by Google AdSense. Ads are loaded only after you accept advertising cookies. Third-party vendors, including Google, then use cookies to serve ads based on your prior visits to this and other websites; Google's advertising cookies enable it and its partners to show you ads based on those visits. Ads are displayed in isolated frames, and OPPE never shares your documents with Google or any other advertiser: they are processed on your device either way. If you reject, no advertising code is loaded and the strict Content-Security-Policy (connect-src 'self') remains in force.
Cookies and your choices
OPPE's own cookies only remember your theme and cookie choices, plus the framework's anti-forgery security token. Advertising cookies are set by Google only if you accept them. You can change your decision at any time with “Cookie settings” at the bottom of every page.
If a tool ever needs the server
A few planned tools (e.g. Office to PDF) need server-side engines. They will process files strictly in RAM, stream the result straight back and are clearly labelled.
Personal data and your rights (KVKK / GDPR)
OPPE has no accounts and keeps no record that identifies you. The server uses your IP address only in memory, for at most one minute, to limit abuse of the anonymous counter; it is not saved. If you email us, your address and message are used only to reply. Under the Turkish Personal Data Protection Law (KVKK No. 6698, Article 11) and the GDPR you may ask what data concerns you, have it corrected or deleted, and object to its processing; write to us for any such request.