Files are processed in your browser, not uploaded. Privacy →
Deckle
Open a PDF
Skip to guide

Privacy

Are online PDF tools safe? What to check before you upload

By DeckleUpdated

Online PDF tools are safe to use for a document when you know where the file goes, how long it is kept and who can reach it, and those answers fit the document. Before you upload anything sensitive, check whether the service processes files on its servers or in your browser, read its retention and privacy terms, and test it with a harmless file. Deckle processes PDFs in your browser and does not upload them, so there is no server copy to ask about.

Merge PDF

Three different privacy tasks

Password

Controls access

Metadata

Document properties

Redaction

Selected page content

Choose the change; inspect the saved copy

Conceptual comparison · access, properties and content require separate checks. No single task certifies complete privacy.

The checklist

Work through these questions for the specific tool you plan to use. A site can process some tools locally and upload for others.

Question Where to find the answer A good answer
Is the file uploaded? The tool page, the privacy policy, the network check below Processed in the browser, or uploaded only to a named service you approve
How long is it kept? Privacy policy, help pages A short, stated period, with automatic deletion
Where are the servers? Privacy policy, terms A region your organisation or law allows
Who can access files? Privacy policy, security page Staff access restricted and explained
Is it used for anything else? Terms of service Not used for training, analytics or resale
Is an account required? Sign-up page Not for one-off tasks, or an account you control
Who runs the service? About page, imprint, terms A named company with a contact address

If you cannot find an answer, treat it as unknown. For work documents, unknown usually means not approved.

How to test a service before using it

  1. Make a test PDF with nothing private in it, for example a page of placeholder text.
  2. Open the service in a desktop browser and open the developer tools on the Network tab.
  3. Clear the list, add the test file and run the tool.
  4. Look for an outgoing request roughly the size of your PDF. That is an upload. Requests for scripts, fonts and images are the website loading.
  5. Note where the result download comes from. A link from a separate storage address means the result was made on a server.

What browser-local PDF processing means explains the requests a local tool makes.

Warning signs

  • No privacy policy, or one that does not mention files.
  • "We may use uploaded content to improve our services" or similar wording in the terms.
  • Very long or no retention period. "Files are deleted periodically" says nothing.
  • Forced sign-in with a social account for a single task.
  • Pop-ups asking you to install a browser extension or app before you can download.
  • Claims you cannot check, such as "100% secure" or "military-grade", without saying what happens to the file.

Match the service to the document

Document Reasonable choice
Public brochure, menu, flyer Any reputable service
CV, cover letter A service with clear deletion, or a local tool
Payslip, bank statement, tax form A local tool
Contract, HR or legal letter A local tool, or a service your organisation approves
Passport, ID card, medical record A local tool

With Deckle, every tool runs in your browser: open, for example, Merge PDFs or Remove PDF metadata, add your file and choose the button. The website loads over the internet; the document's bytes are not uploaded, and no account is needed.

What any service leaves to you

Whichever tool you use, the file you send can carry more than its pages show: an author name, editing history, comments or attached files. Check it before sending with how to check a PDF for hidden information. A password keeps outsiders out of a file in transit; send it separately, as in how to send a password-protected PDF safely.

Tips

  • Ask your IT team first for work documents. Many organisations list approved tools.
  • Use a test file for every new service. Never test with the real document.
  • Check the tool, not just the site. One site can use different processing for different tools.
  • Delete local copies you no longer need. Downloads stay in your folders until you remove them.

Frequently asked questions

Are free online PDF tools safe?

Some are, for some documents. The question is whether the file is uploaded and what happens to it afterwards. Use the checklist and prefer a local tool for anything personal or confidential.

Do online PDF tools keep my files?

Upload services usually keep files for a stated period, often an hour or a day, before deleting them. A browser-local tool such as Deckle does not receive the file at all.

Is it safe to upload a bank statement to a PDF website?

Only to a service you trust with your account details. A local tool avoids the question, because the statement is processed on your device.

Can a website say "browser-based" and still upload my file?

Yes. The interface may run in the browser while the processing happens on a server. The network check shows which.

Related tools