What happens to a PDF you upload.

What online PDF tools do with an uploaded file, what their own pages promise, and how to tell a tool that works in your browser, with nothing uploaded.

By Suraj Kumar1 November 20265 min read

Most online PDF tools work the same way: your file goes to their server, it is changed there, and a new file comes back. The well-known ones are run by real companies with published policies. Whether that is safe enough depends on the file. Here is what an upload involves, what the services themselves say, and how to keep a file on your own device instead.

What an upload means.

Uploading puts a full copy of the file on a computer you do not control. It is processed there, stored at least while that happens, and deleted later according to the service's policy. Transfers are usually encrypted, so the file is safe on the way. What happens next you take on trust.

For a menu or a flyer that matters little. For a passport scan, a bank statement, a medical letter or a contract, it is worth thinking about, and so is anything you type in: a tool that unlocks a PDF on a server receives the password too.

What the services say.

iLovePDF says uploaded documents are deleted automatically within two hours, that transfers use HTTPS, and that its servers are under European law; documents in its signing tool are kept longer. Smallpdf says files from its free tools are deleted after one hour and transfers use 256-bit TLS, and that files kept in an account stay until you delete them.

These are reasonable promises, and there is no reason to doubt them. They are still promises: you cannot check from outside what happens to a file on someone else's server. Read the policy of any tool you use, and notice how long accounts and cloud storage keep files.

Tools that never receive the file.

A PDF can be merged, split, compressed, edited, signed and converted inside the browser, with the work done by code that runs on your device. The file is read from your disk and the result saved back to it. There is nothing to delete afterwards, because nothing was sent. Every KeepSimp PDF tool works this way.

The cost is your device's memory. A computer handles files of several hundred megabytes; a phone handles less, and KeepSimp's PDF tools take up to 100 MB a file there.

How to check a tool yourself.

Load the tool's page, then turn off Wi-Fi or mobile data and use it. A tool that uploads cannot finish; one that works on your device carries on. KeepSimp's pages work offline once loaded.

On a computer you can also open the browser's developer tools, choose the Network panel, and watch while the tool works: an upload shows as a request about the size of your file.

A simple rule.

Upload what you would be comfortable emailing to a stranger. Keep on your own device what you would not: identity documents, statements, payslips, medical and legal papers, and anything with a password.

A little less theory. A little more doing.

Try it on your own terms, with a free browser tool.

Try the tool