Are online PDF tools safe? Where your file goes

The short answer

The big online PDF tools are generally run with care and say they delete your file within one to eight hours. But your file still leaves your device and sits on someone else's server for a while. For private papers like tax forms, ID scans or medical letters, a tool that works inside your browser or an app on your own computer keeps the file with you.

Upload or in your browser: the difference

Most online tools work like a print shop. You hand over your file, it is copied to the company's computers (its servers), changed there, and sent back for you to download. The company then deletes its copy after a set time.

A few tools work the other way round. The web page sends the tool to your browser, and your own phone or computer does the work. The file is never sent anywhere, so there is no copy to delete. Desktop apps such as PDF24 Creator for Windows also keep the file on your computer.

Neither way is automatically unsafe. The question is simply whether you are comfortable with a copy of this file being on another company's computer for a while.

Where each service processes your file

This is what each service says on its own privacy or security pages. We have not tested their servers.

What "deleted after an hour" means

When a service says it deletes files after an hour, it is a promise about its own systems. It is usually a fair promise from a well-run company. It does not change the fact that for that hour your file is on a computer you do not control, and that you are trusting the company's staff, its storage provider and its security.

Two details are easy to miss. If you sign in, some services keep your file in your account until you delete it, as Adobe and Smallpdf say. And signing a document can keep it much longer: iLovePDF says it keeps signed documents for up to 5 years for legal reasons.

What to look for

• A clear statement of where the file goes. Look for words like "processed in your browser" or "uploaded to our servers". If a site does not say, assume it uploads.
• A deletion time with a number. "One hour" or "two hours" is something you can hold a company to. "A short time" is vaguer.
• Where the servers are. Servers in the EU fall under EU data protection law, as Smallpdf points out.
• What signing in changes. An account often means your files are stored until you remove them.
• Ads and trackers. A free site paid for by ads loads scripts from other companies. They do not get your file, but they do learn that you visited.
• Check it yourself. On a computer, press F12, open the Network tab and use the tool. A tool that uploads shows a large request about the size of your file.

When to use which

• Everyday files, like a flyer or a menu: any of the well-known online tools is fine.
• Private files, like contracts, payslips, medical letters or passport scans: use a tool that works in your browser, such as FilesAll or BentoPDF, or a desktop app.
• Work files with rules: ask your employer. Some require a tool with formal security certificates. iLovePDF, Smallpdf and Adobe list ISO 27001; FilesAll has none yet.

Read more in Smallpdf alternatives that don't upload your files and How FilesAll keeps your files on your device.

Sources

Checked on October 19, 2026, from each company's own pages: Smallpdf's Is Smallpdf safe?, iLovePDF's security page, Adobe's free online tools FAQ and compliance list, PDF24's FAQ and tools page, FreeConvert's image converter page and security page, and TinyWow's privacy policy. Services change, so check their pages for the latest. Smallpdf, iLovePDF, Adobe, Acrobat, PDF24, FreeConvert, TinyWow and BentoPDF are trademarks of their owners, and FilesAll is not affiliated with them.