Skip to content
PDFHive

Are online PDF tools safe? Upload sites vs in-browser tools

Updated

When you search for a quick way to merge or compress a PDF, you find dozens of free websites. Most look alike, and most say your files are safe. But they work in two very different ways, and for documents like bank statements, contracts or ID scans the difference matters. This guide explains both, without the marketing, and shows you how to check what a site really does.

How upload sites work

Most online PDF tools are upload sites:

  1. Your file is sent over the internet to the company’s server.
  2. The server processes it, for example compressing or converting it.
  3. You download the result from the server.
  4. The files are deleted later, according to the site’s own rules.

This works well, and many upload sites are run carefully. The point is that you are relying on their promise. Your file sits on a computer you don’t control, for a time you can’t check, possibly in another country with different privacy laws. Copies can also end up in backups or logs, and any company can be hacked.

For a holiday photo, that may not worry you. For a passport scan or a payslip, it’s worth thinking about.

How in-browser tools work

An in-browser tool sends the tool to you, rather than your file to the tool:

  1. When you open the page, your browser downloads the website and its code, like any other page.
  2. When you choose a file, your browser reads it from your own computer or phone.
  3. The work happens on your device, inside the browser tab.
  4. The result is saved straight to your device.

The file never travels anywhere, so there is nothing stored on a server, nothing to delete afterwards, and no copy that could leak from someone else’s computer. That is how every PDFHive tool works, from Compress PDF to HEIC to JPG.

Where each one is stronger

Neither approach is better at everything.

Upload sites In-browser tools
Your file leaves your device Yes No
Depends on the site deleting your file Yes No
Works well on older or slow phones Usually Large files can be slow
Very large files Limited by the site’s upload limit Limited by your device’s memory
Heavy jobs, such as OCR or Office conversion Often available Fewer options

For everyday jobs, such as merging, splitting, compressing, rotating, signing and converting images, a modern browser is more than capable. That is where in-browser tools make the most sense, especially for private documents.

“We delete your files after one hour”

Many upload sites promise to delete files after a set time. That’s a good policy, but notice what it tells you: your file was stored, and you have to trust that the deletion happens. An in-browser tool has nothing to delete, because it never received the file.

How to check where your file really goes

You don’t have to take any website’s word for it, including ours. On a computer, your browser can show you every request a page makes:

  1. Open the tool in Chrome, Edge or Firefox, press F12, and click the Network tab.
  2. Choose a test file that is a few MB in size, so an upload would stand out, and process it with the tool.
  3. Look at the list of requests that appear while it works. On an upload site you’ll see a request going out that is about as large as your file. With an in-browser tool there is no such request. You may still see small downloads, because some tools fetch parts of themselves the first time you use them.
  4. Look at the address of anything that sends data. Antivirus programs and browser extensions sometimes add their own scripts to every page you visit, and their requests appear in the list too, under their own company’s address rather than the website’s.

A quicker but rougher sign: an in-browser tool usually processes a large file without a long “Uploading…” step first, because nothing is being sent.

Switching off Wi-Fi isn’t a reliable test. Some in-browser tools, including ours, still fetch small pieces of their own code from the website each time they run, so they can stop working offline even though your file never leaves your device.

A quick safety checklist for any PDF website

  1. Read what happens to your file. A trustworthy site explains it plainly in its privacy policy. Ours is in our Privacy Policy.
  2. Be wary of sites that require an account or email address just to download a result, unless you need what the account offers.
  3. Check the address bar shows the site you meant to visit, especially if you arrived from an ad.
  4. For sensitive documents, prefer tools that work in your browser, and check the network view once to be sure.
  5. Protect files before sending them on. If the PDF goes out by email afterwards, add a password with Protect PDF. See How to send a PDF securely by email.

Tools for this guide

Frequently asked questions

Does HTTPS mean my file is safe on an upload site?

HTTPS protects the file while it travels to the website, so nobody on the way can read it. It says nothing about what happens once the file arrives, such as how long it is kept or who can access it. For that, read the site's privacy policy.

Are in-browser tools completely private?

Your file stays on your device, which is the most important part. But the website still sees your visit, like any website, through things like your IP address and the pages you open, and it may use analytics or ads. Its privacy policy should say what it collects.

Is it safe to use these tools for bank statements and IDs?

With an in-browser tool, the document itself isn't sent anywhere. The remaining risk is on your own device, especially a shared or public computer. Delete downloaded copies from the Downloads folder when you're done, and close the browser tab.

Why do some tools need to upload files at all?

Some jobs need more computing power or software than a browser offers, such as converting Word files with exact fonts or reading text from scans (OCR) on a slow phone. Upload sites can also be faster on old devices. That is a fair trade-off, as long as you know it's happening.

More guides

All guides