Your files stay yours
For every tool that runs in your browser, your PDF is never uploaded. It is opened, edited and saved entirely on your own device, which means there is no copy on our servers to store, share, leak or promise to delete later.
How it works
Nothing leavesyour device.
When you choose a file, it is read by the page you already have open. The PDF engine runs as WebAssembly inside that tab. Editing, rendering and saving all happen in your browser’s memory, and the download is produced locally. You can confirm this yourself: open your browser’s network tab and edit a file — no request carries it.
Close the tab and the file is gone from memory. We never had it.
Where the exception is
A few conversions cannot run client-side — Office formats need a real Office engine, and heavy OCR on long scans is impractical in a browser. Those tools upload the file, process it, and delete it afterwards. Any page that works this way says so on the page itself, before you pick a file, rather than in a policy nobody reads.
What we do collect
Ordinary, aggregate web analytics: which pages get visited, roughly from where, and whether things error. No file contents, no file names. An optional sign-in exists for people who want it, but no tool has ever required one, and signing in never touches what a tool does with your file. We do not sell data, and there is no advertising profile being built here.
Open the PDF editor → Why this is free
PDFora — Genuinely free, genuinely private.