You've got a PDF to merge, compress, or convert to images. You type "free PDF converter" into Google, click the first result, drag your file in, and... wait. That file might be your ID, a signed contract, a bank statement, a medical report. You just handed it to a website you'd never heard of ten seconds ago. So it's worth asking the question almost nobody asks before clicking upload: are online PDF converters safe?
The honest answer is it depends, and this guide gives you the actual risk picture: what happens to your file when you upload it, when it's fine and when it really isn't, a five-minute test that shows whether a tool uploads at all, and the one option that sidesteps the whole problem.
What actually happens when you "convert online"
There are two different paths behind the same "Choose file" button:
- Processing on a server. Your browser sends the file over the internet, the service's server does the merge or conversion, and sends the result back. For a few seconds or a few hours, a copy exists outside your device.
- Processing in your browser. The page reads the file locally and does the work on your own machine. The file never travels to the converter's server.
An encrypted https:// connection protects the file in transit. It says nothing about what the site does with the file after it arrives. The service may delete it immediately, keep it for hours, or pass it to a storage or analytics provider. The answer has to be in a clear policy, not in a phrase like "we respect your privacy".
A test you can repeat in five minutes
You do not have to take a site's word for it. Every desktop browser has a Network panel that lists each request the page makes and how big it is. Mozilla's Network Monitor documentation describes it for Firefox; Chrome and Edge have the same panel under the same name.
- Open the tool and let it load completely.
- Press F12 and open the Network tab.
- Clear the recorded requests, then add a test file that contains nothing private.
- Run the conversion and watch for new requests.
- Look for a large
POSTorPUTrequest about the size of your file. That is an upload. No such request is a strong sign the work stayed on your device.
A second check: load the page, switch off your Wi-Fi, and run the conversion again. A tool that still works has no server in the loop.
I tried the DocFlow web tools on this site with a public 63.9 KB image. In Images to PDF the file appeared in the list with its dimensions, 1200 × 630, and the convert button became active without an account. That is a usage note, not proof; the Network tab is the proof, and it works on this site as on any other. Note the limit of the method too: complicated scripts could send data in pieces, so combine the test with reading the privacy policy.
The real risks (without the fearmongering)
A reputable converter handling a boring, public document is usually fine. The risks scale with how sensitive the file is and how trustworthy the service is:
- Exposure of sensitive data. IDs, contracts, tax forms, medical records, anything with names, account numbers or signatures. Once uploaded, a stranger's server holds it.
- Unclear retention. "Files are deleted automatically" without a stated period tells you nothing you can check.
- Third parties you did not choose. The file may pass through a cloud storage provider, an OCR vendor or an analytics service the policy mentions in passing or not at all.
- Guessable download links. Some tools put the result at a link that stays valid for a while.
- Uploading the wrong file. In a hurry you pick a version with more pages than you meant to send.
- Misleading "Download" buttons in the ads around the real one, leading to software you did not ask for.
- Shared machines. On a work computer or a synced browser profile the file stays in Downloads and in history after you are done.
None of this means online converters are evil. It means you match the tool to the sensitivity of the file.
When it's fine, and when to avoid uploading
| The file | What to do |
|---|---|
| A public image or a document already published | A reputable service is fine |
| An invoice with the personal details removed | Read the policy, then upload if you must |
| ID, passport, bank statement, medical report | Use a tool that works on your device |
| A client document under a confidentiality agreement | Follow the organisation's policy; never a random site |
| A password-protected PDF | Do not type the password into a site you do not trust |
Removing sensitive data before uploading helps less than it seems: information survives in comments, form fields and document properties. When in doubt, do not send it.
How to tell a reasonable converter from a risky one
- The address is correct and uses
https://, not a look-alike with an extra letter. - A readable privacy policy that names files, how long they are kept and when they are deleted.
- No request to install an extension or a program for a simple job.
- No email address or card before the free result is shown.
- It says whether processing is local or on a server.
- A named company or person and a way to contact them.
- You can try it with a dummy file first.
Open the result and check the page count and order before deleting anything, and keep the original until you have confirmed text, images and signatures survived.
The safest option: tools that never upload your file
The most secure online PDF tool is one that does not send your file anywhere, because it does the work inside your browser. No upload, no server, nothing to breach or retain.
That is how the DocFlow web tools on this site are built: images to PDF, PDF to images, merge, split and image compression all run in the browser, free, with no sign-up. The privacy is not a policy you have to trust; it is how the tool works, and the Network-tab test above lets you confirm it. For scanning, OCR and signing on a phone, the DocFlow Scanner app processes documents on the device; unlike the web tools, the app's OCR, export and signing are part of DocFlow Pro, a paid plan, while scanning itself is free.
One distinction worth keeping: processing files should stay in your browser, but when you genuinely need files in the cloud for backup or sync across devices, pick a provider where client-side encryption is at least an option, so the server cannot read them. pCloud offers that, with pay-once lifetime plans. (Affiliate link.)
Mistakes I made before I had a rule
Trusting the word "free": the price says nothing about where the file goes. Testing a new tool with a real document instead of a two-page dummy PDF. Forgetting the Downloads folder on a shared machine. And assuming a private browsing window prevents uploads: it reduces local traces and changes nothing about how the service works.