PreviewNinja Privacy Policy

Effective date: October 18, 2026
Last updated: October 18, 2026

PreviewNinja (“PreviewNinja,” “Service”) is a free content disarm and reconstruction (CDR) and document-preview service operated by Highpoint Foundry, Inc., a Wyoming corporation (“Highpoint Foundry,” “we,” “us,” or “our”). The Service is available at previewninja.com. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you upload a document, forward an email, view a document, or otherwise interact with PreviewNinja.

This policy applies specifically to PreviewNinja. Highpoint Foundry’s general corporate privacy policy is available at policy.hpfd.app/privacy. Other Highpoint Foundry products may have different privacy practices and policies.

1. Information We Collect

Uploaded documents. When you upload a file, we receive the file and information associated with it, which may include its name, type, size, metadata, embedded content, and any personal, confidential, or sensitive information within it.

Forwarded emails. When you forward an email to the Service, we may receive and process the email’s subject, sender and recipient addresses, routing information, headers, message body, attachments, and other content included in the forwarded message. We send a response email containing a private link to view the processed document. Information about other people may be included even if they have never used PreviewNinja.

Document processing and security results. We store the original submitted document, reconstructed or previewable versions, and intermediate processing states while the document remains active. We also generate and retain document metadata, security scan results, detected threats, processing outcomes, hashes, and related technical records. Certain document metadata is retained indefinitely as described in Section 7.

Private document links and deletion credentials. We create a private URL for each document. When you submit a document using a supported browser flow, we set a browser cookie containing a secret credential that allows that browser to request deletion of the associated document. We may process the credential to verify deletion requests.

Usage and technical information. When you use the Service, our servers may receive information such as IP address, browser and device information, request timestamps, URLs requested, and operational or security logs. We also process document-view activity to determine when the 14-day inactivity period has elapsed.

Communications. If you contact us, we receive the information you choose to provide, including your contact details and the content of your message.

2. How We Use Information

We use information to:

Receive uploaded files and forwarded emails, process and reconstruct documents, and provide private viewing links, including by response email for email submissions.
Run local security scanning tools and report their findings.
Send submitted content to additional third-party scanners only when the relevant optional sharing feature has been affirmatively selected.
Display documents to people who access their private document URLs.
Recognize deletion credentials and process authorized deletion requests.
Determine document inactivity and operate automatic deletion.
Maintain, troubleshoot, secure, and protect the Service; retain document metadata to identify repeated submissions and prevent abuse; investigate abuse and respond to security incidents.
Detect, investigate, and report suspected child sexual abuse material (CSAM) and other unlawful material as permitted or required by applicable law.
Respond to inquiries, comply with applicable law, and enforce applicable service terms.

Document reconstruction and security scanning reduce certain risks but do not guarantee that a document, preview, link, or download is free of malicious content or safe for every purpose.

3. Local Security Scanning

By default, PreviewNinja analyzes submitted documents using security tools operated locally within Highpoint Foundry’s infrastructure. Local scanning does not, by itself, require submitting the document to a third-party cloud scanning service.

Local processing may still involve software or technology supplied by third parties. Information may also be disclosed as otherwise described in this policy, such as when a document URL is shared or disclosure is legally required.

4. Optional Third-Party Cloud Scanning

You may choose to submit a document to additional external security-scanning providers, potentially including VirusTotal or OPSWAT MetaDefender. This sharing is optional and opt-in; it is not required for the default local scanning process.

If you opt in, the selected provider may receive the original document or other submitted content, relevant metadata, and information necessary to conduct its analysis. Once transferred, that provider may process, store, retain, analyze, or share the submission under its own terms and privacy practices, which may differ substantially from ours. Some security-analysis platforms may retain samples or make submitted material or scan results available to security researchers, partners, customers, or other parties.

Do not opt in to external scanning for documents containing confidential, proprietary, personal, regulated, or otherwise sensitive information unless you are authorized to make that disclosure and accept the third party’s handling practices. Withdrawing your preference later or deleting a document from PreviewNinja may not remove copies or results held by external providers.

Provider availability and the external scanning options offered may change. Review the relevant provider’s current terms and privacy policy before enabling its service.

Each processed document is made accessible through a private document URL. Possession of that URL is the access mechanism. PreviewNinja does not provide a separate password, login requirement, or identity check for people opening the link.

Anyone who obtains a valid private document URL may be able to view the associated document and its available preview or results, whether or not you intended to share it with that person. You are responsible for safeguarding the URL and deciding with whom to share it.

Links can be exposed through messages, browser history, screenshots, copied text, shared devices, browser extensions, logs, or recipients who forward them. Treat private document URLs as sensitive credentials. Do not submit or share documents unless you have the necessary rights and permissions to do so.

People who access a document may be able to save, copy, photograph, or otherwise retain information they see. Deleting the document from PreviewNinja cannot retrieve copies made by others.

6. Cookies and Document Deletion Credentials

For supported browser submissions, PreviewNinja stores a secret deletion credential in a browser cookie. This credential enables the browser holding it to request deletion of the associated document without a separate user account.

The deletion credential is sensitive. Anyone who obtains a valid credential may be able to request deletion of the associated document. If the cookie is cleared, expires, becomes unavailable, or you switch browsers or devices, you may lose access to the cookie-based deletion function. A private viewing URL alone does not establish the right to delete a document.

We use this cookie to provide the deletion feature, not as a guarantee of identity or document ownership. Browser settings may affect whether this feature works.

7. Retention and Automatic Deletion

PreviewNinja automatically removes stored document content that has not been viewed for 14 days. This applies equally to documents submitted through the website and by forwarded email. Viewing a document resets the inactivity period, so a document that continues to be viewed may remain available for longer than 14 days after submission. Document content includes the original file, reconstructed versions, and intermediate processing states.

Document metadata is retained indefinitely. We retain metadata and related technical and security records about submissions, such as file characteristics, hashes, processing and scanning results, timestamps, and abuse-prevention indicators, for ongoing service operation, security, and abuse prevention, even after the underlying document content is deleted. Depending on the record, retained metadata may include personal information or information derived from a document. We do not promise routine deletion of these metadata records, but we honor applicable legal rights and requirements.

We may preserve document content beyond the normal inactivity period when reasonably necessary to comply with valid legal process, investigate suspected abuse (including suspected CSAM), preserve evidence, or fulfill applicable legal obligations. Such exceptions are subject to applicable law.

A person with the applicable deletion credential may request deletion of stored document content earlier through the supported deletion mechanism. Email submissions are subject to the same inactivity rule, but a deletion cookie may not be available merely because a document was submitted by email; opening the emailed link does not by itself guarantee possession of a deletion credential. Removal from active document storage does not delete indefinitely retained document metadata and may not immediately erase every copy or trace, including backups, security or operational logs, cached content, previously shared copies, or information held by optional external scanning providers. Some document content or other records may be preserved for security investigations or legal obligations, subject to applicable law.

We do not promise that copies outside our control will be deleted when a document expires or is deleted from the Service. If you require guaranteed immediate erasure of all copies, do not use PreviewNinja for that material.

8. Disclosure of Information

We may disclose information:

To recipients of a private document URL: The document and associated available information can be accessed by anyone who possesses the link.
To optional external scanners: Only when you affirmatively opt in to the relevant submission, as described above.
To service providers: When needed for hosting, infrastructure, email delivery or receipt, security, maintenance, or other Service operations, subject to appropriate arrangements.
In response to U.S. legal process: We may preserve or disclose stored documents, email submissions, related metadata, and other records to law enforcement or other authorized parties when properly served with a valid order, warrant, subpoena, or other compulsory legal process issued by a U.S. court, as applicable. We may review or challenge requests where appropriate and will comply with applicable law.
For child-safety detection and reporting: We may scan any submitted document, including its original, reconstructed, and intermediate forms, for suspected child sexual abuse material (CSAM), using automated or other review methods. We may preserve relevant content and records and report suspected CSAM to the National Center for Missing & Exploited Children (NCMEC), law enforcement, or other appropriate authorities as permitted or required by law. We may provide related content and identifying or technical information in those reports.
For other legal and safety reasons: When reasonably necessary to comply with applicable law, address security threats, investigate abuse, or protect rights, users, or the public.
In business transactions: In connection with a merger, acquisition, financing, reorganization, or transfer of relevant assets, subject to applicable law.

We do not represent that information submitted to optional external scanning providers remains exclusively under Highpoint Foundry’s control.

9. Security and Limitations

We use measures intended to protect the Service and the information it processes. No internet service, document-processing system, private link, or storage system can guarantee absolute security.

PreviewNinja is intended to reduce risks associated with opening untrusted documents, not to certify that a document is harmless. Security scan results may be incomplete or incorrect, and reconstruction may change or omit document content or functionality.

Because access is controlled by possession of a URL rather than recipient authentication, PreviewNinja is not an appropriate place to store information that requires verified-recipient access controls. Consider whether the sensitivity of your document is compatible with this model before submitting it.

10. Your Choices and Rights

You can choose not to upload or forward documents; decline optional third-party scanning; control who receives a private document URL; and, where available, use the deletion credential in your browser to request removal of a document.

Depending on your location, applicable privacy laws may provide rights to access, correct, delete, or obtain information about personal data, or to object to certain processing. Such rights are subject to legal exceptions and verification requirements. To make a privacy request, contact us using the details below.

We may need sufficient information to verify your authority to act regarding a document or personal information. Possession of a document URL alone may not be sufficient to authorize a privacy request concerning someone else’s information.

11. International Use

PreviewNinja may be accessed from outside the United States. Information submitted to the Service may be processed and stored in the United States or other locations where we or our service providers operate. Privacy and data-protection laws may differ by jurisdiction. Where required, we will use appropriate safeguards for international transfers.

12. Children’s Privacy

PreviewNinja is not directed to children under 13, and we do not knowingly solicit personal information directly from children under 13. If you believe a child has submitted personal information in violation of applicable law, contact us so we can evaluate the request and take appropriate action.

Documents submitted by other users may incidentally contain information about minors; users should avoid submitting such information unless authorized and legally permitted.

13. Changes to This Policy

We may update this Privacy Policy as the Service, its practices, or legal requirements change. We will update the “Last Updated” date and provide additional notice or seek consent where required by law. The version in effect when you use the Service governs the relevant processing, subject to applicable law.

14. Contact

Highpoint Foundry, Inc.
30 N Gould St Ste 3911
Sheridan, WY 82801
United States

Email: support@hpfd.net
Service: previewninja.com
Policies: policy.hpfd.app

For privacy questions or requests, email support@hpfd.net and identify PreviewNinja in your message.