Most online PDF tools work by uploading your file to a server, processing it there and offering the result for download. Nothing about that is inherently unsafe. Large, reputable services encrypt the connection, delete files after a short time and publish clear policies. The risk is that you usually can't verify any of it, and the documents people convert are often exactly the ones that matter: payslips, contracts, ID scans, medical letters.
What to check before uploading
- Retention. Does the policy say how long files are kept? "Deleted after one hour" is specific. "Kept as long as necessary" is not.
- Location and law. Where are the servers, and which privacy law applies? In the EU, GDPR gives you rights over personal data in uploaded documents.
- Who runs it. A company with a name, an address and a support contact is accountable. An anonymous site with heavy advertising has less reason to be careful.
- What else is uploaded. Some sites ask you to connect cloud storage or create an account to download. Ask yourself why.
Tools that don't upload
Some jobs can be done entirely in your browser: merging, splitting, rotating, adding text or page numbers, converting images. In that case the website only delivers the program; your file is opened from your disk by the page itself and never travels anywhere. That's how every tool on this site works.
How to check for yourself
You don't have to take anyone's word for it, including ours.
- Open your browser's developer tools (F12 on most computers) and go to the Network tab.
- Use the tool on a test file.
- Look at the requests. An upload shows up as a large request going out, roughly the size of your file. A local tool only loads scripts and fonts.
A simpler test: use the tool once so its scripts load, then turn on airplane mode and try again with another file. A local tool keeps working.
Jobs that do need a server
Browsers can do more than people expect: compression, AES-256 encryption and even OCR now run locally. A few conversions remain genuinely hard without a server, mainly PDF to editable Word or Excel with the layout intact. For those, a server-based service is the practical choice. Use a well-known one, remove anything sensitive you don't need to send, and strip the metadata first.