Privacy
Your files never leave your device
Most free PDF websites upload your document to their servers to process it. PDF Tools works differently, and you can check it yourself.
Your files are processed on your device
When you add a PDF or an image, your browser reads it into memory on your own computer or phone. Every tool on PDF Tools (merging, splitting, compressing, unlocking, signing) runs as code inside that browser tab, using open-source libraries such as pdf-lib and Mozilla's PDF.js.
The finished file is created in the same place and saved straight to your Downloads. Nothing is sent to a server first.
The site is locked so it can't send your files
Every page is served with a Content-Security-Policy that only lets it connect to PDF Tools itself (connect-src 'self'). The browser enforces this, not us. On top of that, the site has no upload endpoint: there is nowhere on our side a file could be sent to.
Passwords stay with you too
When you unlock or protect a PDF, the password is used by the code in your browser and then forgotten when you close the tab. It is never transmitted or stored, which also means we can't recover a password you've lost.
What we don't do
No accounts, no cookies for tracking, no analytics scripts, and no copies of your documents, ever.
Check it yourself in one minute
- 1Open any tool, for example Merge PDF.
- 2Press F12 (or right-click → Inspect) and open the Network tab. On a phone, use a desktop browser for this check.
- 3Add your files and run the tool.
- 4Look through the requests: you'll see the page's own scripts and fonts loading, but no request that carries your file.
The open-source software that makes this possible is listed on the licences page.