Security & Privacy
Is It Safe to Use Online PDF Tools?
Some online PDF tools upload your documents to a server; some never transmit them at all. How to tell which you are using, and how to check.
It is a fair question and the honest answer is: it depends entirely on where the work happens. Two websites that look identical can treat your document in completely different ways.
The two architectures
| Server-side | Browser-side | |
|---|---|---|
| Your file is | Uploaded to a server | Read locally by the page |
| Processing happens | On their machines | On yours |
| They could retain it | Yes | No — they never receive it |
| Works offline | No | Yes, once loaded |
| Limited by | Their upload cap | Your device memory |
Server-side is not inherently disreputable — it is how most tools were built, and it handles very large files well. It does mean your document is in someone else's custody, governed by a retention policy you have to take on trust.
How to tell which one you are using
- 1Open developer tools with F12, or Cmd+Option+I on a Mac.
- 2Go to the Network tab and clear it.
- 3Process a file.
- 4Look for a large POST request. That is your document going out.
- 5For certainty, disconnect from the internet after the page loads. If the tool still works, nothing was uploaded.
Questions worth asking about an uploading tool
- How long are files retained, and is deletion verifiable?
- Which jurisdiction are the servers in?
- Is the connection encrypted end to end, and is storage encrypted at rest?
- Who has access internally?
- Are documents used to train anything?
Reputable services answer these clearly. A tool with no privacy policy at all is answering by omission.
What genuinely should not be uploaded
Client files under professional privilege. Medical records. Anything covered by an NDA. Identity documents. Financial statements with account numbers. Not because a specific service is untrustworthy, but because you generally cannot obtain permission to hand these to a third party, and you rarely have to.
The trade-off, stated plainly
Local processing costs you speed on very large files and the first page load is bigger. In exchange, the document never leaves your device. For most jobs the performance difference is imperceptible and the privacy difference is absolute.
Do it now
Merge PDF
Combine multiple PDFs into a single file. It runs in this browser tab — your file is not uploaded anywhere.
Open Merge PDFFrequently asked questions
Are free PDF tools safe?+
Free says nothing about safety. What matters is whether the file is uploaded, and what happens to it if it is.
How do I check whether a tool uploads my file?+
Watch the Network tab in developer tools, or simply disconnect from the internet and see whether it still works.
Is a tool with HTTPS safe?+
HTTPS protects the file in transit. It says nothing about what happens once it arrives.
Can browser-based tools handle large files?+
Up to the limits of your device memory. Very large jobs are where server-side tools have a real advantage.