Why Most Free PDF Tools Aren't Actually Private
A plain-English look at how "free" PDF tools actually work
Type "merge PDF free" into Google and you'll get a dozen results, most of them with similar-looking green upload buttons and reassuring words like "secure" and "private" somewhere on the page. It's easy to assume that if a tool is popular and looks professional, your files are being handled safely. In most cases, that assumption deserves a closer look.
How the typical "free PDF tool" actually works
When you select a file on most PDF websites, here's what actually happens, step by step:
- Your file is uploaded from your device to the company's server, somewhere else in the world
- The merge, compression, or conversion happens on that server, not on your device
- The result is sent back to your browser for download
- The company's privacy policy usually states the file is deleted after some period — often between a couple of hours and a few days
None of this is necessarily malicious. It's simply the easiest, most common way to build this kind of tool, and it's been the industry default for years. But it does mean that, for however long that file sits on a server you don't control, someone else's infrastructure is holding a copy of your bank statement, ID document, contract, or whatever else you needed converted.
Real, publicly documented examples
This isn't a guess about how these companies operate — it's disclosed in their own privacy policies and documentation:
- Smallpdf processes files on Google Cloud servers located in Europe.
- iLovePDF processes files on servers based in Spain.
- Sejda deletes uploaded files after a stated window of around 2 hours.
None of these companies are hiding this — it's in their own published policies if you look. The point isn't that any of them are acting in bad faith. The point is that "free" and "private" aren't the same thing, and most people never actually check which one they're getting.
Why this matters more for some files than others
For a lot of everyday files — a school assignment, a public flyer — none of this really matters. But a meaningful share of what people actually feed into these tools is genuinely sensitive: bank statements for a loan application, signed contracts, medical records, government ID scans, tax documents. For those, "the file was probably deleted after a few hours, on a server somewhere in another country" is a real trade-off worth knowing you're making, even if the odds of anything going wrong are low.
The alternative: processing that never leaves your device
Modern browsers are powerful enough to do this kind of work locally, using WebAssembly and JavaScript — merging PDFs, running real OCR text extraction, even applying genuine AES-256 encryption, all on your own device. No upload, because there's nothing to upload anywhere. This is the architecture FormatDog is built on, across all 32 tools on the site, including password protection, redaction, and merging.
In fairness, FormatDog isn't the only tool built this way — a handful of other newer PDF tools have adopted the same client-side approach in the past couple of years. But it's still very much the exception rather than the norm across the space as a whole.
How to actually check any tool yourself, in under a minute
You don't have to take any site's word for this, including ours. Here's how to verify it directly, on any PDF tool:
- Open your browser's Developer Tools (press F12, or right-click the page and choose "Inspect")
- Click the "Network" tab
- Select a file and run whatever the tool does (merge, compress, convert)
- Watch the Network tab while it processes
If you see your file's data being sent out to a request during processing, it's being uploaded. If nothing resembling your file's content appears in that list, it's being handled locally. This takes about 30 seconds and works on literally any website, not just PDF tools.
The takeaway
Nothing here is meant to say every other tool is dangerous, or that you should panic about anything you've already uploaded in the past. Most of these companies operate reasonably and delete files roughly when they say they will. The real point is simpler: "free" doesn't automatically mean "private," and for anything genuinely sensitive, it's worth knowing which one you're actually getting — and now you know exactly how to check, for any tool, in under a minute.