Privacy and security
Your documents stay on your device
Opening a file gives this browser tab access to it. The file is not uploaded to us or to anyone else, and the work is done by your own computer or phone.
- Processed on your deviceEvery tool runs in this browser tab.
- No uploadsThere is no server that receives documents.
- No trackingNo analytics, ads or session recording.
- Cleared on closeFiles are kept in memory only.
What happens on your device
Every tool, from merging and compressing to filling forms and signing, runs inside your browser, in background workers on your own device. File names, document contents, form answers, signatures, passwords and generated files are never sent to a processing service. There is no processing server and no server fallback.
Security measures
- Locked-down page. A Content Security Policy allows the page to run only its own code, to connect only to its own address, and never to submit forms elsewhere, so it cannot send your documents to another website.
- No outside code. The PDF engines, fonts and icons are served from this website. There are no third-party scripts, trackers or font services.
- Documents are not run. Scripts and automatic actions inside a PDF are never executed; files are read as data only.
- Separated work. Heavy processing runs in isolated background workers; a failed or cancelled job is stopped without touching your original.
- Checked results. Before a result is offered for saving, it is re-opened with a separate reader and checked against what you asked for.
What uses the network
Your browser downloads this website and the code it needs from the same website. Choosing “Try a sample PDF” downloads a sample file. The hosting provider may receive normal request information such as your IP address. There are no analytics, advertising scripts, session recordings or third-party fonts.
What is remembered
Documents stay in memory for the current tab only and are not written to browser storage. Choosing Close, or closing or reloading the tab, clears the app's references to them. Clearing memory is not forensic erasure. Files you save go wherever your browser saves downloads.
Two things can be kept in this browser: your light or dark theme choice, and your signature, but only if you tick “Remember on this device” in Sign PDF. Unticking it deletes the signature. Neither leaves your device.
Password-protected files
A password is used on your device to open the document and is never stored or logged. Protected files can be viewed and saved as they are; changing them needs the protection tools, which are not available yet.
Signatures
Sign PDF places a picture of your signature on the page. It is not a certified digital signature, which some official processes require.
Working without a connection
Tools need their code to be downloaded first. This version does not yet guarantee offline use; a later version will show which tools are ready offline.