Are online PDF tools safe? What happens to your files
Updated · 4 min read
Free PDF websites are convenient, but most of them work by uploading your document to a server. For a restaurant menu that hardly matters. For a payslip, passport scan or contract it's worth knowing where the file goes — and that a growing number of tools don't need to upload anything at all.
Two ways an online PDF tool can work
| Upload-based tools | In-browser tools | |
|---|---|---|
| Where the work happens | On the company's servers | On your own device, inside the browser tab |
| Does your file leave your device? | Yes — it's sent over the internet and stored, at least briefly | No — it's read and processed locally |
| What you have to trust | Their security, retention policy and staff | The code running in the page |
| Works with a slow connection? | Large files take a long time to upload | Speed depends on your device, not your connection |
Browsers can now run serious software — through WebAssembly and background workers — fast enough to merge, compress, split and convert documents without a server. That's how most of the tools on this site work.
What happens to an uploaded file
When a tool uploads your PDF, a copy exists somewhere else for a while. A reputable service encrypts the transfer, deletes files after a short time and says so in its privacy policy. Even then, the copy is subject to things you can't see:
- Retention: how long files and their converted results are really kept, including in backups and logs.
- Processors: which cloud providers and subcontractors store or handle the file, and in which countries.
- Breaches: any stored file can be exposed if the service is compromised.
- Other uses: whether documents may be analysed, kept for "service improvement" or used to train AI models.
None of this means upload-based tools are bad — some jobs genuinely need a server. It means the safest file is the one that never left your computer, and for sensitive documents it's worth choosing tools that don't upload.
How to check whether a tool uploads your file
You don't have to take a website's word for it. Every desktop browser can show you what a page sends:
- Open the tool's page, then open the browser's developer tools (F12, or Cmd+Option+I on a Mac) and choose the Network tab.
- Add your file and run the tool.
- Watch the list of requests. An upload shows up as a request whose size is roughly the size of your file. An in-browser tool shows no such request — only small ones for the page itself.
Tip: Look for a clear statement on the tool page itself, not just in a privacy policy. Tools that really process files locally usually say so plainly, and tools that need a server should tell you before you upload.
How this site handles files
Most tools here, including Compress PDF, Merge PDF, Split, Sign and Protect, run entirely in your browser: the file is never sent to us. A few jobs can't be done well in a browser — converting Word documents to PDF needs a full office suite, for example. Those tools say on their page that they use our server; the file is uploaded to private storage, deleted after conversion, and anything left over is removed automatically within a day.
We count page views and anonymous events such as "a tool finished", with the tool, file count, size range and duration — never file names or contents.
Before you share a sensitive PDF
Where a file is processed is only part of the picture. Documents often carry more than you meant to share:
- Hidden details in the text. Drawing a black box over text in an editor usually leaves the words underneath, still copyable. Redact PDF removes them for real by rebuilding each affected page as an image with the black boxes drawn in.
- Metadata. PDFs record an author name, the program used and sometimes a title or subject. Edit PDF Metadata can remove all of it.
- Who can open it. If the file travels by email, an open password keeps it private even if it reaches the wrong inbox. See PDF passwords explained and Protect PDF.
Redact runs in your browser, so the details you're hiding aren't uploaded either.
A quick checklist
- Does the tool say clearly whether files are uploaded?
- If it uploads, does it say how long files are kept and that they aren't used for anything else?
- Does the Network tab confirm what it claims?
- Have you removed details the recipient doesn't need?
Questions
Is it safe to upload a PDF to a free online converter?
It depends on the service and the document. Reputable services encrypt uploads and delete files quickly, but any upload means a copy exists elsewhere. For sensitive documents, prefer tools that work in your browser.
How can a website edit a PDF without uploading it?
The page downloads the processing code to your browser, which then works on the file locally — the same way a desktop app would, but inside the tab.
Is redacting by drawing a black box enough?
Usually not. A box drawn on top often leaves the original text in the file. Use a redaction tool that removes the text, such as Redact PDF, and check the result before sharing.