Is it safe to convert PDFs online? A privacy checklist
Online PDF converters are convenient, and most are run by honest companies. But “convert online” usually means “send your document to someone else’s computer”. Whether that is safe depends on what is in the PDF and how the converter works. This guide explains the two kinds of converters and gives you a checklist for sensitive files.
Two very different kinds of “online” converters
| Upload-based | In-browser (local) | |
|---|---|---|
| Where the PDF is processed | On the provider’s server | In your browser tab, on your device |
| Does the file leave your device? | Yes, the full file is uploaded | No |
| Who could access it | Provider, its cloud host, subcontractors; attackers if breached | Only you |
| Retention | Whatever the provider’s policy says (often 1–24 h) | Gone when you close the tab |
| Works offline after loading | No | Yes |
Our PDF tools are of the second kind: the PDF is rendered by PDF.js in your browser and the images are created on your device.
What can go wrong with uploads
- Retention you cannot verify. “Files are deleted after one hour” is a promise, not something you can check. Backups, logs and caches may keep copies longer.
- Breaches. Any server that stores thousands of user documents is an attractive target.
- Secondary use. Some free services reserve the right to analyze uploaded content, for example to improve their products. Read the terms.
- Jurisdiction. Your file may be processed in another country with different privacy laws — a problem for GDPR-regulated or client-confidential data.
- Look-alike sites. Search ads sometimes lead to copycat converters that bundle adware with the “download” button.
PDFs carry more than the visible page
Even if a page looks harmless, the file may contain author names, the software and computer it was made on, edit history, form field values, hidden layers, comments and attachments. Converting pages to images drops most of that — which is another reason to do the conversion locally, before anything is shared.
A 7-point checklist before converting a sensitive PDF
- Know what is inside. IDs, contracts, medical, tax and bank documents deserve local processing.
- Prefer local tools. Use an in-browser converter or a desktop app instead of an upload service.
- Verify “no upload” claims. Load the tool, go offline, convert. If it still works, nothing was uploaded. Or watch the Network tab in the developer tools (F12).
- Check the address bar. Make sure you are on the site you meant to visit, served over HTTPS — not an ad that leads to a look-alike.
- Do not install anything just to convert one file, and decline browser extensions you did not ask for.
- If you must upload, read the privacy policy: retention period, server location, and whether files are used for anything else.
- Clean up. Delete downloaded images you no longer need, especially on shared computers.
What about ads and analytics on free tool sites?
Many free tools, including this one, are paid for by advertising. Ads and analytics may set cookies and see which pages you visit — but on a local tool they never receive your document, because the document never leaves your browser. Our Privacy Policy lists exactly which third parties are involved and how to opt out.
FAQ
Is an HTTPS converter safe for confidential files?
HTTPS only protects the file on its way to the server. It says nothing about what happens on the server. For confidential files, use a converter that does not upload at all.
How can I tell if a converter uploads my file?
Load it, disconnect from the internet and try a conversion. Upload-based tools fail immediately; local tools keep working.