Free testing period
Paper Mason Privacy Policy
Paper Mason is local-first. The cleanup workspace processes selected documents in your browser by default. The hosted free testing period uses Cloudflare Web Analytics for aggregate traffic and performance measurement, plus first-party controls for document workspace diagnostics and sorting-improvement signals.
What stays local
Paper Mason does not intentionally transmit source files, filenames, archive paths, page images, screenshots, full document text, full OCR text, raw local paths, exact extracted values, exact page counts, file sizes, MIME types, image dimensions, or full user-agent strings.
Diagnostic testing data
If diagnostic sharing is on, Paper Mason may send first-party events such as workflow area, action and outcome buckets, duration buckets, attribution fields such as UTM/referrer category and landing variant, coarse browser and operating-system family, app version, build id, safe error codes, fixed safe messages, and scrubbed stack traces.
Marketing and app-shell analytics
Cloudflare Web Analytics may measure cookieless aggregate page traffic, referrer/source categories, browser/device aggregates, and page performance for the public pages and app shell. This analytics lane is separate from document-workspace diagnostics and does not receive source files, filenames, OCR text, document text, page images, exact extracted values, raw local paths, or reconstructable document-batch payloads from Paper Mason.
Sorting-improvement signals
If sorting improvement sharing is on, Paper Mason may send limited document-derived signals so new document styles can be sorted better: proposed and corrected top-level folders, confidence buckets, route status, warning categories, classifier reason/evidence codes, OCR usefulness buckets, and tightly bounded redacted text evidence snippets. Sensitive cases collapse to a generalized sensitive status and do not include evidence snippets.
What is never sent
Testing payloads must not include source filenames, full document or OCR text, page images, screenshots, exact field values, account numbers, Social Security numbers, full addresses, exact dates, exact amounts, raw paths, raw IP addresses in application telemetry tables, or payloads that reconstruct a document batch.
Your choices
Terms acceptance is required before the workspace is interactive. Diagnostic sharing and sorting-improvement sharing are separate controls, default on only during the free testing period, and can be unchecked before use or changed later in settings. Turning them off does not block local cleanup.
Retention and providers
Allowlisted first-party testing events are stored in Cloudflare D1 and are intended to be pruned after 90 days. IP-derived abuse/rate-limit counters are stored separately, salted with daily rotation, and pruned after 7-14 days. Cloudflare hosts the app, Web Analytics, D1 storage, and the first-party testing endpoint. No session replay, ad pixels, or remote fonts are used for the free testing build.
U.S. testing focus
Paper Mason is intended and marketed for U.S. users during testing. EU/UK targeting, consent defaults, data rights, and access strategy must be revisited before active support outside that scope.