Are Online PDF and Image Tools Safe? How to Tell If a Site Uploads Your Files
Before you drop a passport scan into a website, read this.
Free online tools are convenient, but many of them work by sending your file to a company's server, processing it there and sending a result back. For a vacation photo that may not matter. For a contract, tax form, passport scan or ID card copy, it deserves a second look.
Two kinds of online tools
| Upload-based | In-browser (client-side) | |
|---|---|---|
| Where the work happens | On the company's server | On your own device |
| Your file leaves your device | Yes | No |
| Works offline once loaded | No | Often yes |
| Retention depends on | The company's policy | Nothing is sent, so nothing to retain |
How to check a site yourself
- Read the privacy policy for words like "uploaded", "stored" and "deleted after".
- Open your browser's developer tools, go to the Network tab, run the tool and see whether a large request is sent out with your file.
- Try turning off your internet connection after the page loads. If the tool still works, it is processing locally.
Habits that help
- Avoid tools that require an account for a one-off task.
- Add a watermark to ID copies stating who they are for and the date. See how to watermark an ID copy.
- Remove location data from photos before sharing. See this guide.
- Prefer password-protected links and expiry dates when you must share a file.
How FreeTool works
The tools on this site run in your browser. Files you choose are not uploaded to our servers. We load a few open-source libraries from public content delivery networks, but your files are not sent to them either. You can run the offline test above on any of our tools to check for yourself.
FAQ
Is in-browser processing always safe?
It removes the risk of a server keeping your file, but you should still use a device you trust and avoid shared computers for sensitive documents.
Can a site claim it doesn't upload and still do it?
Yes, which is why the network and offline checks above are worth doing once.