Leaf Viewer by Ontiqo

Privacy Policy

Last updated 14 October 2026

1. Scope

This policy applies to the Leaf Viewer application (Leaf) and the website at leafviewer.app (the Website), both provided by Ontiqo Pty Ltd (ACN 701 340 418, ABN 38 701 340 418) of Daylesford, Victoria, Australia (Ontiqo, we, us).

2. The application

Leaf does not collect personal information and does not send information to us. It has no analytics, telemetry, crash reporting, account or update check, and it makes no network requests. Documents opened in Leaf are not transmitted from your computer.

  1. Documents. Leaf reads a document and displays it. It does not write to a file it opens, create a copy, upload anything or index your disk. It reads the file you ask it to open; while you browse in its Open panel, it also reads the folders shown there and previews the files in them. To draw a document in a typeface that Microsoft Office has downloaded to your computer, it reads that font.
  2. Settings. Leaf stores only your own settings: accent colour, zoom, text size, page width, typeface, line wrapping, sidebar and film size, the folder you last opened a file from, and a list of up to twelve recently opened documents (each with its path, name and the time it was opened) so that it can offer to reopen them. They are stored on your computer, in Leaf’s folder in your user profile, are not synchronised, and are removed when Leaf is uninstalled.
  3. Passwords. A password entered to open a locked document is used to open that document and is then discarded. It is not saved, logged or transmitted. While you browse inside a locked archive it is held in memory, so that each file need not ask for it again, and is discarded when you leave the archive.

3. Technical measures

  1. Leaf’s display engine runs under a content security policy of default-src 'none', which prevents it from contacting any address. Scripts, stylesheets, fonts and images may load only from within the installed application or from the document being displayed. A request from a document, such as a tracking pixel in an HTML file or SVG, is refused before it is made.
  2. Documents are sanitised before display. Scripts, event handlers, embedded frames and javascript: links are removed from every file, whatever its format.
  3. If you click a link in a document, Leaf passes that address to your default web browser. Leaf does not follow the link itself, and nothing is sent until you click.

4. The Microsoft Store

Leaf is distributed through the Microsoft Store. Download, payment (if any) and updates are handled by Microsoft under the Microsoft privacy statement. Microsoft is the merchant of record.

Microsoft provides publishers with a reporting page, from which Ontiqo can see:

  1. the number of installations, by country, Windows version and device type;
  2. aggregate crash and hang reports, if Windows sent any;
  3. ratings, and the text and display name of any review you choose to publish; and
  4. payout totals, if Leaf is sold for a price.

This information is aggregated, except a review, which is public. Ontiqo does not receive your name, email address, payment details or IP address. This information is reported by Windows and the Microsoft Store, not by Leaf.

5. The Website

The Website consists of static pages hosted on Cloudflare Pages. It uses Cloudflare Web Analytics, which sets no cookie. It has no tag manager and no other embedded third-party content.

Cloudflare, as host, processes standard request logs, including IP addresses, to deliver the Website and protect it from attack, under the Cloudflare privacy policy. We do not read those logs and have built nothing on them.

6. Support requests

If you contact us, we hold your email address and the contents of your message for as long as it takes to resolve the matter. We do not add you to a mailing list; there is none. Requests made through the form at ontiqo.com/support are delivered to us by email through Purelymail and are also subject to the Ontiqo privacy policy.

7. Children

Leaf is suitable for any age. It collects no information from anyone, including children.

8. Changes

If this policy changes, the date above changes with it. If Leaf were to gain a feature that requires the network, that feature would be described in this policy first, would be optional, and would be off until you turned it on.

9. Contact and complaints

Privacy enquiries may be sent to [email protected], or to Ontiqo Pty Ltd, Daylesford, Victoria, Australia. If you are in Australia and are dissatisfied with how a privacy matter was handled, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).