How to verify our privacy claims

1. Turn off the internet and keep working

1. Open the tool once while online (that stores it in your browser).
2. Turn off WiFi and mobile data.
3. Drop a PDF and process it: compress, merge, split or convert.
4. Download the result.

If your file were uploaded to a server, none of this could work offline.

2. Watch the live meter

1. Below the workspace there is a meter: “Sent to servers”.
2. It counts any cross-origin resource and any data call (fetch, XHR or beacon) the page makes.
3. Process a file and watch it: it should stay at 0 bytes.

3. Open your browser's inspector

1. Press F12 (or right-click → Inspect) and open the “Network” tab.
2. Filter by “Fetch/XHR”.
3. Drop a file and process it.
4. No request carrying your document will appear.

4. The browser enforces it, not our word

1. The site ships a Content-Security-Policy header that includes connect-src 'self'.
2. That means the browser blocks any transfer to an external server.
3. We also set frame-ancestors 'none' and form-action 'self'.

Even if someone managed to inject malicious code, the browser would stop your document from leaving.