← Back to blog

Where do your PDFs actually go? A plain-English guide to PDF privacy

· The MY PDF FIX Team · 7 min read

PDF workflows

Every week, millions of PDFs are uploaded to free conversion sites. Tax returns, medical records, signed contracts, family photos — all of it leaves the safety of the person's laptop and lands on a server somewhere. Most users have no idea this is happening, and even when they do, the trade-off feels acceptable. After all, the tool worked, the file converted, and nothing bad obviously happened.

The trouble is that nothing bad usually happens visibly. The privacy cost is silent: copies of your file accumulate in caches, backup systems, and the occasional security incident. Most services have policies that say files are deleted after 24 hours, and many honor those policies — but you have no way to verify it, and the policy can change without notice.

There's a simpler, safer alternative: tools that run entirely in your browser. Modern web standards like WebAssembly let JavaScript do real work — including PDF manipulation — without uploading anything. The file is opened, read, and written back, all on your own device. The 'server' in this case is your laptop.

How can you tell which is which? Three signals. First, check the privacy policy or FAQ — reputable tools say so explicitly. Second, watch your network tab in developer tools: a browser-based tool will not send your file's bytes anywhere. Third, try the tool offline. If it still works without an internet connection, it's running locally.

There are legitimate cases where a server is necessary — heavy OCR, complex format conversion, anything that needs proprietary fonts. In those cases, look for tools that delete files immediately after processing and don't keep logs. But for the bread-and-butter tasks — merging, splitting, rotating, watermarking, adding page numbers — there's no reason to send your file across the internet.

MY PDF FIX is built around this principle. Every tool labeled 'Processed locally in your browser' does exactly that, no asterisks. When we eventually add tools that need server processing, we'll label them clearly so you can make an informed choice.