Privacy policy
How Harborleaf PDF handles documents, edits, preferences, recovery data, printing, and platform integrations.
Local document processing
Harborleaf is designed to process documents and edits locally on your device. It does not upload document contents to Horizon Tech Services. These statements must be confirmed against each distributed package before that package is published.
Advertising, accounts, and analytics
The released Windows edition contains no advertising, analytics, telemetry, accounts, or document-upload service. Unreleased Linux and macOS packages must be checked separately before publication.
Information stored on your device
Harborleaf stores preferences and recovery information locally to support settings, crash recovery, and unsaved-document protection. Removing the application may not remove documents you created, imported, exported, or saved.
| Platform | Local-data status | Release verification |
|---|---|---|
| Linux | Electron user-data directory | Path and packaged behavior pending confirmation |
| Windows / Microsoft Store | Per-user application storage managed by Windows | Local document processing confirmed; exact storage paths can vary by package |
| macOS | Per-user application-data directory; exact path pending | Local data categories documented below; App Sandbox path and uninstall behavior pending |
Windows setup and portable editions
Application data and recovery
Harborleaf PDF stores application preferences, browser-engine support data, and crash-recovery information in the current user's application-data directory, normally %APPDATA%\Harborleaf PDF. Recovery information can include a working copy of an unsaved PDF and its editing state. Documents you open, import, export, or save remain in the locations you choose.
Scanning
Scanning uses Windows Image Acquisition (WIA) and the selected scanner's driver. Harborleaf temporarily stores the scanner's image output while importing it, then removes those temporary files. Scanner and driver software may process device and job information under their own settings and privacy terms.
Printing
Ordinary printing sends the selected document through Windows to the printer or print service you choose. In a setup edition that includes Harborleaf PDF Printer, Windows 11 24H2 or newer may temporarily stage a print job in the print-support package's per-user LocalState. The Harborleaf print bridge moves the job into %APPDATA%\Harborleaf PDF\print-inbox, and Harborleaf removes that inbox copy after accepting the job. Jobs not yet accepted, and rejected jobs retained for safety, can remain locally.
Uninstalling
Uninstalling the Windows setup edition removes the application, its registration entry, and the optional Harborleaf PDF Printer package. It does not remove Harborleaf's application-data directory or documents saved elsewhere. After closing Harborleaf, you can remove the remaining application data by deleting %APPDATA%\Harborleaf PDF. The portable edition does not install or register Harborleaf PDF Printer.
The Microsoft Store listing confirms local document processing and no advertising, analytics, telemetry, accounts, or document-upload service. Setup and portable editions may use different application-data paths from the Store package.
macOS edition
Application data and recovery
Harborleaf PDF may store application preferences and first-run status, recently selected files or folders when required by macOS dialogs, temporary files used while importing, converting, scanning, or printing, and recovery copies with related metadata used to restore unsaved work after a crash.
This local application data is not telemetry and is not transmitted to Horizon Tech Services. Recovery information is managed in Harborleaf PDF's per-user application-data directory. Documents you open, import, export, or save remain in the locations you choose.
Temporary files and backups
Temporary scan files created by Harborleaf PDF are deleted after import. Backups maintained by macOS or another backup service may retain copies according to your backup settings.
Removing local data
You can remove application data using controls provided by macOS or the applicable package manager. The exact App Sandbox container path and the Mac App Store edition's uninstall-retention behavior will be published after the packaged build is validated.
The supplied macOS policy is marked as a pre-publication example. Its remaining publisher checklist, including legal review, effective date, provider details, and retention practices, must be completed before publication.
Printing, scanning, and device services
When you choose a device integration, operating-system services, drivers, printers, scanners, print servers, or their administrators may process job information under separate settings. Linux ordinary printing uses the selected CUPS service. Windows behavior is described above; unreleased macOS package behavior remains pending validation.
Stores and external services
Store pages and TestFlight are operated by third parties and have their own privacy practices. This policy does not cover information you provide directly to the Snap Store, Microsoft Store, Apple, or another external service.
Privacy questions and requests
Use the Horizon Tech Services inquiry form, select Other, and begin your message with “Harborleaf privacy request.” Do not attach or paste confidential document contents.