Security & Privacy
What Personal Data Is Hidden in Your PDF
PDFs carry information that never appears on a page — names, file paths, timestamps, revisions and attachments. Here is how to find and remove it.
What you see when you open a PDF is the page content. The file contains a good deal more, and none of it is difficult for a recipient to reach.
Where information hides
| Location | What it can reveal |
|---|---|
| Document metadata | Author name, original title, software, timestamps |
| XMP packet | Editing history, sometimes full file paths |
| Annotations | Reviewer comments and internal discussion |
| Bookmarks | Section names from an earlier draft |
| Form fields | Values that no longer display on the page |
| Attachments | Entire files embedded inside the PDF |
| Incremental saves | Earlier versions of the document |
| Hidden layers | Content that is present but not displayed |
| Content outside the crop | Anything cropped away rather than deleted |
The last two are the ones that cause incidents. Cropping and hiding both remove content from view without removing it from the file.
Real ways this goes wrong
- A tender submission whose Author field names a competitor, because the template was reused.
- A file path revealing a client name in a folder structure: /Clients/Acme-Litigation/.
- Review comments left in a document sent to the subject of those comments.
- A cropped page still containing the personal details that were cropped away.
- A bookmark naming a section that was cut from the final version.
Cleaning a document properly
- 1Redact anything sensitive on the pages, and verify by copy-paste.
- 2Strip the metadata.
- 3Remove annotations and comments.
- 4Remove bookmarks that name removed content.
- 5Flatten form fields so no stored values remain.
- 6Remove embedded attachments unless they belong there.
- 7Save as a new file so no incremental history survives.
- 8Rename the file so its name discloses nothing.
And do it locally
Uploading a document to a website in order to remove the private information from it is a contradiction worth noticing. Tools that process in your browser never receive the file, which is the appropriate property for this particular job.
Do it now
Optimize PDF
Optimize PDF for web and faster loading. It runs in this browser tab — your file is not uploaded anywhere.
Open Optimize PDFFrequently asked questions
Can a recipient see my name in a PDF?+
Usually — the Author field is visible in document properties in any reader.
Does cropping remove content?+
No. It changes the visible area. The cropped content is still in the file.
How do I remove everything hidden at once?+
A full optimisation pass with metadata removal covers most of it. Redaction, flattening and attachment removal are separate deliberate steps.
Is this a GDPR issue?+
It can be. Personal data in metadata is still personal data, and disclosing it unintentionally is still disclosure.