Every day, millions of people drag contracts, pay slips, medical records, and ID scans into free "online PDF converter" websites. Very few stop to ask the obvious question: where does my file actually go?
What happens when you upload a PDF to a converter site
With a conventional PDF site, "processing" means your document travels over the internet to the company's servers, gets converted there, and the result is sent back. For a short window — and sometimes longer — a copy of your file exists on hardware you don't control, operated by a company you've probably never researched, in a jurisdiction you don't know.
Reputable services state that uploads are encrypted in transit and deleted after a few hours, and the well-known names generally honor that. But even in the best case you are trusting that:
- the deletion policy is actually enforced, including in logs and backups;
- the service hasn't been breached — file-processing servers are attractive targets;
- employees and subprocessors can't peek at uploaded content;
- the free service isn't monetizing data in ways buried in the privacy policy.
None of that may matter for a restaurant menu. It matters a great deal for an unsigned contract, a passport scan, or a document covered by GDPR, HIPAA, or an NDA. Many companies ban third-party converter sites outright for exactly this reason.
The safer architecture: tools that never upload
A newer class of PDF tools — pdfia among them — takes a different approach: the processing code (JavaScript and WebAssembly) is downloaded to your browser, and your files are opened and edited locally on your device. There is no upload step to secure, because there is no upload. The file that "never leaves your device" isn't a marketing promise; it's how the software is built.
You can verify this yourself in two ways:
- The airplane-mode test. Load the tool page, disconnect from the internet, then process your file. In-browser tools keep working; upload-based tools fail immediately.
- The network tab. Open your browser's developer tools (F12 → Network), run the tool, and watch: with a client-side tool, no request containing your document is ever sent.
A quick safety checklist for PDF sites
- Does the site say where processing happens — in your browser, or on their servers?
- Is the connection HTTPS? (Table stakes, but check.)
- Does it demand an account or email for basic operations? That's a data-collection signal.
- Does the output carry a watermark or "trial" stamp? That usually means an upsell funnel.
- For server-based tools: is there a clear retention policy with a deletion window?
The bottom line
Online PDF tools aren't uniformly unsafe — but "free converter" sites vary enormously, and with sensitive documents the only architecture that removes the risk entirely is one where the file never leaves your machine. All of pdfia's tools work that way, includingmerge, compress, and themetadata cleaner — which is also worth running before you share any PDF, since documents often quietly embed author names and software versions.