Privacy Policy

This policy covers two separate things: the TorReader PDF application you install on your computer, and the torreader.cloud website including optional TorReader accounts. They behave very differently, so we describe them separately.

1. The TorReader PDF application

TorReader PDF reads and edits your documents entirely on your own computer. You do not need an account, and you can use every reading and markup feature with no internet connection at all.

The application does not:

• Upload your PDF files, or any part of them, to us
• Send usage analytics, telemetry, or crash reports
• Require an account to open, read, annotate, or print documents
• Write to the Windows registry

The application does connect to the internet in these cases, and only these:

• Checking for updates. The app requests torreader.cloud/version.json to see whether a newer version exists. No document data is sent. As with any web request your IP address is visible to our server and to Cloudflare while the request is handled, but as explained in section 2 we do not write it down.
• Translation (optional, off by default). If you turn on the Translate tool, the text you select is sent to Google Translate so it can be translated. This means the selected text leaves your computer and is handled by Google under Google's privacy policy. The app asks for your consent before the first use, and you can withdraw that consent at any time by right-clicking the Translate button and choosing "Reset Translation Consent". Only the text you select is sent — never the whole file.
• Links you click. Buttons such as "Join TorReader" or "Share app" simply open a page in your normal web browser. The app itself sends nothing.

If you never turn on translation and block the app in your firewall, TorReader PDF sends nothing at all.

2. The torreader.cloud website

Our web server does not keep access logs. It does not record which pages you visited or when.

We do count downloads, so that we know how many people use TorReader. To avoid counting the same download twice, your IP address is converted immediately into a one-way salted hash and only that short hash is kept — your actual IP address is never written to disk. Alongside it we keep your country (supplied by Cloudflare) and a daily total. These are counts, not profiles: they cannot be traced back to you, and they are deleted after about 400 days.

We do not use advertising cookies, tracking cookies, or any third-party analytics service.

Because our sites sit behind Cloudflare, Cloudflare processes requests on our behalf and keeps its own short-lived security logs. See Cloudflare's privacy policy.

3. TorReader accounts

Creating an account is optional. You can download and use TorReader PDF without one. If you do create an account, we collect and store:

• Your email address — to identify you, confirm your address, and let you reset your password
• Your password — stored only as a cryptographic hash. We never store, and cannot read, your actual password
• IP address, browser and device type, and sign-in times — to keep your account secure and to detect abuse

Your TorReader account is a single B&B Creations account. The same login also works with our other products, such as BIMServer.

We use this information only to: sign you in and keep you signed in, protect your account, and answer your support requests. We do not sell your data, and we do not share it with advertisers.

Cookies. When you are signed in, we set one essential cookie so the site remembers your session. It is not used for advertising or tracking, and it disappears when you sign out.

Product announcements. We will only email you about new products if you tick the separate box asking for it. Ticking it is never required to create an account, and every such email contains an unsubscribe link.

4. Who else handles your data

We use a small number of service providers to run the service. They process data on our behalf and are not allowed to use it for their own purposes:

• Amazon Web Services — hosts the account service and delivers account emails (such as address confirmation and password resets)
• Cloudflare — protects and delivers our websites
• Google Translate — only when you choose to use the translation feature, as described in section 1

5. How long we keep it

We keep your account data for as long as your account exists. When you delete your account, we delete your account data.

Download statistics are anonymous counts and are kept for about 400 days. As explained in section 2, we keep no web access logs at all.

6. Your choices

• See or correct your data — from your account page, or by emailing us
• Delete your account — from your account page. This removes your access to all B&B Creations products that use this account
• Stop product emails — use the unsubscribe link, or untick the option in your account
• Withdraw translation consent — right-click the Translate button in the app

If you are in the European Economic Area or the United Kingdom, you also have the right to request a copy of your data, to object to processing, and to complain to your local data protection authority. Email us and we will help.

7. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant and you have an account, we will email you.

8. Contact

Questions about privacy? Email [email protected]