The short version

GravesPDF does not connect to the internet, and GravesWare receives nothing from it. Your documents stay on your computer.

What we collect

Nothing.

GravesPDF makes no network connections of any kind. It contains no telemetry, no analytics, no crash reporting, no update check, and no licensing call-home. There is no account to create and nothing to sign in to.

GravesWare, LLC does not receive your documents, your file names, your certificates, or any record that you used the software.

What is stored on your computer

Recent documents

A list of the last twelve documents you opened, so they can be offered when you next start the program. It holds file paths and the time each was opened — not the documents themselves.

• Windows — %APPDATA%\GravesPDF\recent.json
• Linux — ~/.config/GravesPDF/recent.json
• macOS — ~/.config/GravesPDF/recent.json

The file is written so that only your user account can read it, because a file name alone can reveal something private.

You can clear the whole list, or remove individual entries, from the arrow beside the Open button.

Working copies

Editing a document writes a copy of it so the original is never modified before you save. These copies live in a directory created for that session inside your system’s temporary folder, readable only by your user account, and the whole directory is deleted when GravesPDF closes.

Files you save

Wherever you choose to put them.

GravesPDF writes nothing else.

What leaves your computer

Only what you send yourself:

• Printing. The document is handed to the printer you select, through your operating system’s printing service. Where that printer is, and what it does with the document, is determined by how your system and network are configured.
• Saving. Files go where you tell them to. If that location is a network drive or a synchronised folder, the document travels with it.

GravesPDF initiates no other transfer.

Certificates and passwords

When you sign a document, GravesPDF reads the certificate you choose, either from a file you point it at or from your operating system’s certificate store.

The certificate password is used to open the file and is not written anywhere. It is held in the program’s memory while signing, as the underlying system libraries require, and is discarded when the program closes.

Your private key is not copied, transmitted, or stored by GravesPDF.

On Windows and Linux the key is held only in memory and never reaches the disk.

macOS is the exception, and not by our choice: it does not support loading a key into memory alone. There, the operating system places the key in your keychain for the duration of the signing and GravesPDF removes it afterwards. The key stays on your machine and under your account either way, but on macOS it does briefly exist outside the program’s memory.

Documents you open

GravesPDF reads the documents you open in order to display and edit them. It does not index, upload, scan, or otherwise transmit their contents.

Be aware that a PDF you receive from someone else may itself contain content that reaches out to a network when opened in other software. GravesPDF does not follow such links or load remote content.

Purchases

Purchases of GravesPDF through the Microsoft Store are processed by Microsoft. GravesWare, LLC does not receive or store payment card details.

Children

GravesPDF is a general-purpose tool and collects no information from anyone, including children.

Changes

If this statement changes, the revised version ships with the release it applies to. Because nothing is collected, changes here describe the software’s behaviour rather than any use of your data.

Contact

Questions about this statement, or about what GravesPDF does with your documents:

GravesWare, LLC
Support: support@gravesware.com
Website: gravesware.com/gravespdf