Are Online File Tools Safe? How to Check If Your Files Upload

You search for “merge PDF”, click the first result and drop in a scanned contract. Where did that file just go? For many websites the honest answer is: to a server you know nothing about. That is not always a problem, but it is worth knowing which kind of tool you are using before you hand over a passport scan or a medical letter.

Two kinds of online tool

Upload tools send your file across the internet to the company’s server, process it there and send the result back. This is how most free online converters work. It is simple for the developer and works on any device, but a copy of your file exists on someone else’s computer, at least briefly.

Local tools download a program into your browser and process the file on your own device. The file is read from your disk, changed in memory and saved back as a download. No copy needs to exist anywhere else, because nothing is sent.

What can go wrong with uploads

Most services handle files responsibly, but you cannot see what happens after the upload. Possible problems include files being kept longer than promised, being stored in backups, being handled by third-party providers, or being exposed if the service is breached. The risk is small for a holiday photo and larger for IDs, tax papers, contracts, bank statements, medical records and photos of your home or children. A statement such as “files are deleted after one hour” is a promise, not something you can check.

Four quick checks

1. Read what the privacy policy says about files. Look for plain statements about whether files are uploaded, how long they are kept and who can access them. Vague wording, or no mention of files at all, is a warning sign.

2. Watch the Network tab. This is the strongest check and takes about a minute.

• Open the tool page, then open your browser’s developer tools: press F12 (or Ctrl+Shift+I on Windows and Linux, Cmd+Option+I on a Mac).
• Choose the Network tab and click the clear button, so the list is empty.
• Now use the tool: add your file and run it.
• Look at the new requests. An upload shows up as a request, usually of type POST or PUT, whose size is about the size of your file. If your file is 4 MB and you see a 4 MB request to a server, it was uploaded. If you only see small requests, nothing that big was sent.

The code that makes the tool work is downloaded when the page loads, before you choose a file, so those requests are expected. Ads and analytics also make small requests of their own; look for anything as large as your file.

3. Try it offline. Load the page, then switch off your internet (airplane mode, or the Offline option in the Network tab). If the tool still processes your file, the work is being done on your device, because there is nowhere for the file to go.

4. Notice what the site asks for. A tool that needs an account or your email address to merge two PDFs is collecting more than it needs.

Limits of local processing

Running on your own device has trade-offs. Large files can be slow, and on an older phone a very big PDF or batch of photos may run out of memory. The result is also saved to your Downloads folder, so delete sensitive copies when you finish. Local processing protects the file in transit and on someone else’s server, but not from other people who can use your device.

How this site works

The tools on this site run in your browser. Files are read, processed and handed back to you without being uploaded, and every tool page explains how to confirm that with the Network tab, as described above. The site is paid for by advertising: ads load only after you accept them in the consent banner, and they run in their own frames provided by Google, separate from your files. The privacy policy lists exactly what is and is not collected.

A short checklist

• Is the file sensitive? If yes, prefer a local tool.
• Does the policy clearly say whether files are uploaded?
• Do you see a file-sized upload in the Network tab?
• Does the tool work offline once loaded?
• Did you delete the output when you finished?

If you are cleaning photos before sharing them, see our guide to what photos reveal through EXIF metadata. If you want to understand what happens to your PDFs when you compress them, read how PDF compression works.