Privacy
Ontiqo Pty Ltd · last updated 25 August 2026
Leaf Viewer — "Leaf" for short — collects nothing. It has no
analytics, no telemetry, no crash reporting,
no accounts and no update checks. It makes no network requests of any kind,
and the documents you open never leave your computer.
This is not a policy about how carefully we handle your data. There is no
data. What follows explains how that is enforced, and — because Leaf is
distributed through the Microsoft Store — what Microsoft sees that we do not
control.
What Leaf does with your documents
It reads them and draws them on screen. That is the whole of it. Leaf never
writes to a file it opens, never creates a copy, never uploads anything and
never indexes your disk. It reads only the file you asked it to open.
The only things Leaf stores are your own settings — accent colour, text
size, page width, and a short list of recently opened file paths so it can
offer to reopen them. These stay on your own machine, in Leaf's folder in
your user profile. Nothing is synced anywhere. Uninstall Leaf and they go
with it.
If you open a locked document, Leaf asks for its password. The password is
used to open that document and then forgotten: it is never saved, logged or
sent anywhere. While you browse inside a locked archive it is held in memory
so each file need not ask again, and dropped as soon as you leave.
How the promise is enforced
Not by policy, by construction. Leaf's display engine runs under a content
security policy of default-src 'none', which forbids the page
from contacting any address at all. Scripts, stylesheets, fonts and images
may load only from inside the installed application. Even if a document you
opened contained a tracking pixel — as a malicious HTML file or SVG might —
the request is refused before it is made.
Documents are also sanitised before display: scripts, event handlers,
embedded frames and javascript: links are stripped out of every
file, whatever its format.
The single exception is deliberate and requires you to act: if you
click a link in a document, Leaf hands that address to your
normal web browser. Leaf itself never follows it, and nothing is sent
anywhere until you click.
What the Microsoft Store sees
Leaf is distributed through the Microsoft Store, and the Store is Microsoft's,
not ours. When you obtain Leaf, Microsoft handles the download, the payment if
there is one, and the updates — under
Microsoft's own privacy
statement, which governs that relationship.
Microsoft gives publishers a reporting page. From it, Ontiqo can see:
- How many people installed Leaf, broken down by country, Windows version and device type
- Aggregate crash and hang reports, if Windows sent any
- Ratings, and the text and display name of any review you choose to write
- Payout totals, if Leaf is ever paid
All of it is aggregated except a review, which is public because you published
it. We never see your name, your email address, your payment details or
your IP address. Microsoft is the merchant of record; card details go
to Microsoft and never reach us in any form.
None of this comes from Leaf. The application still sends nothing. It is
what Windows and the Store report about installations, and it would happen
identically for any Store application.
This website
This site is static files served by Cloudflare Pages. It uses Cloudflare Web Analytics, which sets no cookie. There is no tag
manager and no other embedded third-party content. Nothing
on this page tracks you, which is why you were not asked to dismiss a banner
about it.
Cloudflare, as the host, processes standard server request logs — including IP
addresses — to serve pages and absorb attacks. That is handled under
Cloudflare's privacy
policy. We do not read those logs and have built nothing on top of them.
If you write to us
If you email us about a problem, we have your email and whatever you put in it,
for as long as it takes to sort the problem out. We will not add you to a
mailing list, because there is not one.
Children
Leaf is a file viewer suitable for any age. Since it collects nothing from
anyone, it collects nothing from children either.
Changes
If this policy ever changes, the date at the top changes with it. Should Leaf
ever gain a feature that genuinely needs the network — there are no plans for
one — it would be opt-in, described here first, and off until you turned it on.
Contact
Ontiqo Pty Ltd · ACN 701 340 418 · ABN 38 701 340 418
Daylesford, Victoria, Australia
privacy@leafviewer.com
If you are in Australia and unhappy with how a privacy matter was handled, you
may complain to the Office of the Australian Information Commissioner at
oaic.gov.au.