How to verify our privacy claims

1. Turn off the internet and keep working

1. Open the tool while online and wait for «Ready to use offline» under the workspace.
2. Turn off WiFi and mobile data.
3. Drop a PDF and process it: compress, merge, split or convert.
4. Download the result.

If your file were uploaded to a server, none of this could work offline.

2. Watch the live meter

1. Below the workspace there is a meter: “Sent to servers”.
2. It counts any cross-origin resource and any data call (fetch, XHR or beacon) the page makes.
3. Process a file and watch it: it should stay at 0 bytes.

3. Open your browser's inspector

1. Press F12 (or right-click → Inspect) and open the “Network” tab.
2. Filter by “Fetch/XHR”.
3. Drop a file and process it.
4. No request carrying your document will appear.

4. The browser enforces it, not our word

1. The site ships a Content-Security-Policy header that includes connect-src 'self'.
2. That means the browser blocks the code's connections to any other domain.
3. We also set frame-ancestors 'none' and form-action 'self'.

The CSP does not stop the whole page from navigating elsewhere. That is why the PDF code also carries no external URL, and an automated test fails if anyone adds one.