Privacy

Ontiqo Pty Ltd · last updated 25 August 2026

Leaf Viewer — "Leaf" for short — collects nothing. It has no analytics, no telemetry, no crash reporting, no accounts and no update checks. It makes no network requests of any kind, and the documents you open never leave your computer.

This is not a policy about how carefully we handle your data. There is no data. What follows explains how that is enforced, and — because Leaf is distributed through the Microsoft Store — what Microsoft sees that we do not control.

What Leaf does with your documents

It reads them and draws them on screen. That is the whole of it. Leaf never writes to a file it opens, never creates a copy, never uploads anything and never indexes your disk. It reads only the file you asked it to open.

The only things Leaf stores are your own settings — theme, accent colour, text size, page width, which file types you asked it to open, and a short list of recently opened file paths so it can offer to reopen them. These sit in a plain JSON file on your own machine, in your user profile. Nothing is synced anywhere. Delete it and Leaf starts fresh.

How the promise is enforced

Not by policy, by construction. Leaf's display engine runs under a content security policy of default-src 'none', which forbids the page from contacting any address at all. Scripts, stylesheets, fonts and images may load only from inside the installed application. Even if a document you opened contained a tracking pixel — as a malicious HTML file or SVG might — the request is refused before it is made.

Documents are also sanitised before display: scripts, event handlers, embedded frames and javascript: links are stripped out of every file, whatever its format.

The single exception is deliberate and requires you to act: if you click a link in a document, Leaf hands that address to your normal web browser. Leaf itself never follows it, and nothing is sent anywhere until you click.

What the Microsoft Store sees

Leaf is distributed through the Microsoft Store, and the Store is Microsoft's, not ours. When you obtain Leaf, Microsoft handles the download, the payment if there is one, and the updates — under Microsoft's own privacy statement, which governs that relationship.

Microsoft gives publishers a reporting page. From it, Ontiqo can see:

• How many people installed Leaf, broken down by country, Windows version and device type
• Aggregate crash and hang reports, if Windows sent any
• Ratings, and the text and display name of any review you choose to write
• Payout totals, if Leaf is ever paid

All of it is aggregated except a review, which is public because you published it. We never see your name, your email address, your payment details or your IP address. Microsoft is the merchant of record; card details go to Microsoft and never reach us in any form.

None of this comes from Leaf. The application still sends nothing. It is what Windows and the Store report about installations, and it would happen identically for any Store application.

This website

This site is static files served by Cloudflare Pages. There is no analytics script, no cookie, no tag manager and no embedded third-party content. Nothing on this page tracks you, which is why you were not asked to dismiss a banner about it.

Cloudflare, as the host, processes standard server request logs — including IP addresses — to serve pages and absorb attacks. That is handled under Cloudflare's privacy policy. We do not read those logs and have built nothing on top of them.

If you write to us

If you email us about a problem, we have your email and whatever you put in it, for as long as it takes to sort the problem out. We will not add you to a mailing list, because there is not one.

Children

Leaf is a document reader suitable for any age. Since it collects nothing from anyone, it collects nothing from children either.

Changes

If this policy ever changes, the date at the top changes with it. Should Leaf ever gain a feature that genuinely needs the network — there are no plans for one — it would be opt-in, described here first, and off until you turned it on.

Contact

Ontiqo Pty Ltd · ACN 701 340 418 · ABN 38 701 340 418
Daylesford, Victoria, Australia
privacy@leafviewer.com

If you are in Australia and unhappy with how a privacy matter was handled, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.