Do Free Online PDF Tools Upload Your Files? How to Check
Every day, millions of people drag a PDF into a free online tool to merge, compress or password-protect it. Almost none of them ask the one question that matters most for a private document: where does my file actually go?
For most popular tools, the answer is: to a server you don't control.
Two ways an online PDF tool can work
There are really only two architectures behind any "PDF tool online":
1. Server-side (your file is uploaded). You choose a file, it is transmitted to the company's servers, processed there, and the result is sent back. Mainstream services such as iLovePDF and Smallpdf work this way — their own privacy policies describe uploading and temporarily storing your files. It handles huge files well, but a copy of your document exists, however briefly, on a machine governed by someone else's retention policy.
2. Client-side (your file never leaves your device). The tool's code is downloaded to your browser and all the work happens locally in JavaScript and WebAssembly. Nothing is uploaded. This is how every tool on Filevane works.
For a holiday photo, server-side is fine. For a contract, bank statement, medical record or passport scan, uploading it to a third party is a real — and completely avoidable — exposure.
"We delete files after an hour" is not the same as "we never had them"
Server-based tools often reassure you that files are deleted after a set time. That is better than nothing, but it is a promise, not a guarantee: the file still travelled across the internet, still landed on their infrastructure, and was still readable there. A client-side tool removes the question entirely — there is nothing to delete because nothing was ever sent.
How to check any tool yourself (30 seconds)
You don't have to take anyone's word for it:
- Open the tool in your browser.
- Press F12 to open Developer Tools and click the Network tab.
- Run the tool on a test file.
- Watch the requests. If your file is uploaded, you'll see a large POST request the moment you add it. If nothing the size of your file ever leaves, the tool is client-side.
Try it on Filevane's Compress PDF or Protect PDF — you will see the file is never transmitted.
Private by architecture, not by policy
Filevane's tools are private because of how they are built, not because of a promise:
- Merge PDF, Compress PDF and Protect PDF all run entirely in your browser.
- There is no upload, no account, no server-imposed file-size cap and no watermark.
- When you password-protect a PDF, the file and the password are handled locally — we never see either.
The next time a free tool asks you to "upload your PDF," it is worth pausing. For anything you would hesitate to email to a stranger, choose a tool that never asks you to hand the file over in the first place.
Tools used in this guide
Frequently asked questions
Do all online PDF tools upload my files?
No. Server-side tools — which includes most popular ones — upload your file to process it, while client-side tools run entirely in your browser and never transmit it. You can tell them apart using your browser's Network tab.
Is it safe to upload sensitive PDFs to online tools?
For confidential documents it is best avoided. Once a file is uploaded, a copy exists on a third-party server governed by their retention policy. A client-side tool never receives the file, so there is nothing to expose.
How can I password-protect a PDF without uploading it?
Use a browser-based tool. Filevane's Protect PDF encrypts the file locally with AES, so the file and the password never leave your device.