Browser-Only PDF Tools — Privacy Test 2026

Why Privacy Matters for PDF Tools

PDFs often contain the most sensitive information you own: tax returns, medical records, legal contracts, financial statements, salary information, and personal correspondence.

When you upload a PDF to an online tool, you are sending that file to a company's server. Even if they delete it "immediately", several things happen during that process: the file passes through their infrastructure, is stored temporarily in memory or disk, and may be logged in request metadata.

For most documents this is fine. For sensitive ones, it's a risk worth understanding.

What "Browser-Only Processing" Actually Means

True browser-only processing means the PDF is opened, modified, and exported entirely within your web browser — using JavaScript to read and write the file. The file never leaves your device. No network requests are made with your document data.

This is genuinely possible for many PDF operations:

Merge and split — combining page structures in JavaScript
Protect and unlock — AES encryption in the browser
Rotate, crop, page numbers, watermark — geometric operations on page content
Extract text — reading text objects from the PDF structure

It is NOT currently possible for:

AI analysis (chat, summarize, translate) — requires large models running on servers
Heavy compression — image re-encoding requires server-side rendering
OCR — running accurate OCR in a browser is impractical

We Tested 8 Tools

We opened the network panel in Chrome DevTools before uploading a test PDF to each tool, and observed which requests were made containing our file data.

SynthPDF

Claim: "Most tools run entirely in your browser"

Verified: Merge, split, protect, unlock, rotate, watermark, page numbers — zero network requests containing file data. AI tools (chat, summarize, compress, translate) make server requests as disclosed.

Verdict: ✓ Accurate claim

PDF24

Claim: "Files processed locally in your browser"

Verified: Core tools (merge, split, rotate) — browser-only confirmed. Conversion tools (PDF to Word) do upload to their server. Some tools are not clearly labeled.

Verdict: ✓ Mostly accurate, but labeling could be clearer

iLovePDF

Claim: No specific browser-only claim (processes on their servers)

Verified: All operations upload to iLovePDF's servers. Transparent about this.

Verdict: ✓ Honest, no misleading claims

Smallpdf

Claim: "Your files are safe" — no browser-only claim

Verified: All operations upload to Smallpdf's servers.

Verdict: ✓ Honest, focuses on server-side security

PDFCandy

Claim: Marketing language implies local processing

Verified: Files upload to their server for all operations tested.

Verdict: ⚠ Marketing language is misleading

Sejda

Claim: "Files are only stored temporarily" — server-side

Verified: All operations upload to server. Honest about it.

Verdict: ✓ Transparent

IlovePDF.com vs ilovepdf.com (copycat sites)

Several copycat domains use names similar to iLovePDF and claim "private browser processing" while clearly uploading files.

Verdict: ✗ Avoid — misleading privacy claims

What to Do with Sensitive Documents

For documents you cannot upload anywhere:

Use browser-only tools for operations that support it — merge, split, protect on SynthPDF or PDF24
Use desktop software for AI operations — Adobe Acrobat offline, or run open-source tools like poppler locally
For compression — use Ghostscript locally via command line: gs -sDEVICE=pdfwrite -dCompatibilityLevel=1.4 -dPDFSETTINGS=/ebook -o output.pdf input.pdf
For redaction — always use desktop tools for legally sensitive redaction, verify the output

Quick Reference: Which Operations Are Browser-Only?

Operation	Browser-Only Available?	Tool
Merge PDFs	✓ Yes	SynthPDF, PDF24
Split PDF	✓ Yes	SynthPDF, PDF24
Protect PDF	✓ Yes	SynthPDF
Unlock PDF	✓ Yes	SynthPDF
Rotate / Watermark	✓ Yes	SynthPDF, PDF24
Compress PDF	✗ Server required	All tools
PDF to Word	✗ Server required	All tools
AI Chat / Summarize	✗ Server required	All AI tools
OCR	✗ Server required	All tools