Are free online PDF tools safe?
Is it safe to use a free online PDF tool?
Save your favourite tools
Create a free iBuildPDF account to keep your favourite tools and find them quickly anytime.
Free account. The PDF tools themselves never need one.
Short answer
It depends on one thing: whether the file leaves your computer. A tool that does the work in your browser never receives the document, so there is nothing for it to keep. A tool that uploads it has your document, whatever the page says about deleting it afterwards. The two look identical from the outside, and most sites do not tell you which they are.
There are only two kinds
Every online PDF tool is one or the other. It is worth knowing which before you choose a file, not after.
Where the work happens
- Your browser. The page fetches its code once, before you have chosen a file.
- The file is read and rewritten inside that tab, on your own machine.
- The server never receives the document — so there is nothing for it to keep, log or lose.
In the browser. The page loads code, and that code opens your file on your own machine. Nothing is transmitted. You can pull the network cable out after the page has loaded and the tool still works — which is also how you can prove it.
On a server. The file is uploaded, processed somewhere else, and the result sent back. This is not automatically wrong; some jobs genuinely cannot be done any other way. But your document is now on a computer you do not control, governed by a policy you did not negotiate.
How to tell, in ten seconds
You do not have to take anyone’s word for it.
- Load the tool page and wait for it to finish loading.
- Go offline — turn off Wi-Fi, or switch on flight mode.
- Choose your file and run the tool.
If it works, nothing was uploaded, because nothing could have been. If it fails or hangs, the work was happening elsewhere.
The slower, more precise version: open your browser’s developer tools, switch to the Network tab, and watch what happens when you pick the file. An upload is a request with your file’s size in it, and it is unmistakable.
Signals worth taking seriously
- No statement at all about where processing happens. A site that does it locally will say so, because it is the best thing about it.
- "Files deleted after one hour" — that is a retention policy, which means the files were uploaded. It may be perfectly honest. It is not the same claim as "never uploaded".
- An account required to download the result. Now the document and an identity are in the same place.
- A desktop installer offered for a web task. Rarely the tool you came for.
- No privacy policy, or one that never names a company. There is nobody to hold to it.
A short rule that covers most cases
Sort the document, not the site. Ask what is in the file and what would happen if a stranger read it.
- A holiday photo album, a club newsletter, a public report. Use whatever works.
- A CV, a lease, a quotation. Prefer a tool that runs in your browser. You can check in ten seconds.
- Medical records, a passport scan, anything under an NDA, anything with someone else’s personal data in it. Browser-based or not at all — and if a server-side step is genuinely unavoidable, that is a decision to make deliberately rather than by clicking the first result.
On this site, tools that run in your browser say so on the page, and the ones that need a server say that instead. How browser-based PDF tools work explains the mechanism, including its limits.
Tools this article covers
Sources
Primary documentation for the claims above.