Mostly, yes, with one big caveat. The majority of free online PDF sites work by uploading your file to their servers, doing the work there and sending the result back. That's not sinister. It's just how most of them are built. But it means the safety of your file depends on a company you've probably never heard of doing what its privacy policy says.
For a restaurant menu, that doesn't matter. For a signed contract, a passport scan, a payslip or a medical report, it's worth thinking about for ten seconds before you hit upload.
What happens when a site uploads your file
When you drop a PDF onto a typical online tool, the file travels over an encrypted connection (HTTPS) to a server somewhere, gets processed and is stored there at least until you download the result. Most reputable sites say they delete uploads after a set time, often an hour or a few hours.
That's a reasonable setup, and plenty of honest services run this way. The issue is that you can't check any of it. You're trusting that:
- the files really are deleted when they say,
- they aren't kept in backups or logs,
- nobody with access to the servers looks at them,
- the servers aren't breached in the meantime,
- and the company is where it says it is, under the privacy laws it claims.
None of that is visible from your side. All you really have is the privacy policy.
So the question isn't really "is this site safe". It's "am I comfortable with this particular file sitting on someone else's computer for a while". For a lot of documents, the answer is fine. For some, it isn't.
How browser-based tools differ
There's another way to build these tools. Instead of sending your file to a server, the website sends the code to you. Your browser downloads the tool once, like any web page, and then that code reads and edits the PDF on your own device. The file never leaves it.
Modern browsers are fast enough for this. Merging, splitting, compressing, filling in forms, signing, even OCR can all run locally. The trade-off is that your own device does the work, so a 500-page scanned file can be slow on an older phone, and very large files can run out of memory.
That's how EddiesPDF is built. The page loads the tool code, and your PDF is processed in the browser tab. There's no upload step, and nothing for us to delete afterwards, because we never had it.
How to check any site yourself
You don't have to take anyone's word for this, ours included. On a computer, Chrome, Edge and Firefox can show you every request a page sends:
- Open the tool page and press F12 (on a Mac, Cmd+Option+I) to open the developer tools.
- Click the Network tab, then load the page again so it starts recording.
- Add a reasonably large PDF, say 10 MB, and run the tool.
- Click the "Size" column header to sort by size and look at the biggest requests.
An upload shows up as a request about as big as your file, usually a POST to the site's own server. If the biggest things in the list are the page's scripts and fonts, and nothing comes close to the size of your PDF, the file stayed on your device.
There's a quicker hint that needs no tools at all. Pick a big file and watch what happens when you add it. If you see an "Uploading" progress bar that crawls along at the speed of your internet connection, it's going to a server. A browser-based tool reads the file from your disk, which is near-instant even for large files.
One caveat for the curious: some sites load extra code or data the first time you use a feature, so you'll see a few downloads either way. What matters is whether anything the size of your document goes up, not what comes down.
Where EddiesPDF does use the server
There are three exceptions, and you should know about them:
- Request signature uploads your PDF and stores it on our server. It has to: the people you're asking to sign need to open the document from their own devices, through a link in an email. You can read more in the guide to getting a PDF signed by other people.
- Publishing a form. In Edit PDF and Create forms, the "Publish" option uploads the form so other people can open and fill it online. If you just build a form and download it, nothing is uploaded.
- OCR language data. The first time you use OCR PDF with a language, the browser downloads that language's recognition data from a public CDN. That's a download to you. Your file isn't sent anywhere.
Separately, the site collects anonymous usage counts (which tools get used) and error messages when something breaks. Those never include file contents or file names.
Other things worth doing
Where the processing happens is one question. A few other habits protect you more than any single site choice:
- Watch out for fake download buttons. Some free sites run ads that look exactly like a big green Download button. If clicking it opens a new tab or offers you a program, it was an ad.
- Be wary of any PDF site that asks you to install a browser extension or a desktop app to finish the job. Extensions can often read every page you visit.
- Don't upload documents containing passwords, bank details, tax IDs or passport numbers to a site you know nothing about. If you're not sure how it works, check it with the Network tab first.
- Before sending a document to anyone, remove what they don't need to see. Redact PDF removes the text under the box properly, unlike a black rectangle drawn on top. The guide to redacting a PDF properly explains why that difference matters.
- If a sensitive file has to travel by email, add a password with Protect PDF and send the password some other way, like a text message.
A sensible way to decide
Sort your documents into two piles. Things you wouldn't mind a stranger seeing (a flyer, a published report, a recipe) can go through whatever tool is handy. Things you would mind (IDs, contracts, health, money) should go through a tool that processes locally, or desktop software you already trust, such as Preview on a Mac or Adobe Acrobat Reader.
And whichever site you use, the Network tab check takes about a minute. It's the one check that doesn't depend on believing what the site says about itself.
Also useful: Redact PDF · Protect PDF
