Handling Sensitive PDFs: Local Processing vs Uploading

By PDF Hut team · Published September 27, 2026

Tax returns, payslips, medical letters, contracts, passport scans – the PDFs people most often need to merge, split or shrink are also the ones they least want to hand to a stranger. This guide explains what actually happens to your file with different kinds of online tools, how to check a tool's claims yourself, and what else to look at before a document leaves your hands.

What happens when you upload a PDF

Many online PDF services work by uploading your document to their servers. The file travels over an encrypted connection, is stored at least long enough to be processed, and the result is stored again until you download it. That model is not wrong in itself, and reputable services describe it in their privacy policies. But it means that:

• a copy of your document exists, at least temporarily, on computers you don't control – possibly in another country and under another legal system;
• you rely on the service's promise to delete it, usually after a set period, and you have no way to verify that;
• the file may pass through backups, logs or third-party cloud providers, and could be exposed in a breach;
• for work documents, uploading may break your employer's rules or data-protection obligations, even if nothing bad ever happens.

What local, in-browser processing means

A browser-based tool does the work on your own device. The website delivers program code – JavaScript – and your browser runs it. When you choose a file, it is read from your disk into the memory of that browser tab, processed there, and the result is handed back to you as a download. The server never receives the document.

PDF Hut works this way. Merging, splitting, compressing, watermarking and building PDFs use the open-source pdf-lib library; reading text and rendering pages to images use Mozilla's PDF.js. Both libraries are downloaded from public content-delivery networks when you open a tool page. Nothing is stored after you close the tab.

How to verify a tool really works locally

Don't take any website's word for it – including ours. Two simple checks work on any computer:

1. Watch the network. Open your browser's developer tools (F12, or Cmd+Option+I on a Mac), switch to the Network tab and then run the tool. An upload shows up as a request – typically a POST – whose size is similar to your file. With a local tool you will see no such request; you may see ads or library files load, but nothing that carries your document.
2. Go offline. Open the tool page, wait for it to load completely, then switch off Wi-Fi or unplug the network. Run the tool. PDF Hut's pdf-lib-based tools – such as Merge PDF, Split PDF or Add Watermark – keep working, because everything they need is already in the page. (The PDF.js-based tools fetch an extra worker file the first time they run, so test those with the network check instead.)

A tool that stops working offline is not necessarily uploading your file, but a tool that keeps working offline cannot be sending it anywhere during that run.

Local doesn't mean risk-free

Processing on your own device removes the biggest risk, but a few others remain, and they apply to every website:

• Browser extensions. Extensions allowed to "read and change data on all websites" can see what pages display. For very sensitive work, use a browser profile without extensions, or a private window – most browsers disable extensions there unless you have allowed them.
• Scripts on the page. Web pages, including ad-supported ones like this site, load third-party scripts, and any script on a page could in principle read what that page reads. PDF Hut only passes your files to the PDF libraries, but if your documents are covered by legal or regulatory duties, the most conservative choice is offline desktop software on a managed computer.
• Shared computers. Downloads stay in the Downloads folder and in the browser's download history. On a shared or public computer, delete both when you are done.

Before you share: what a PDF can reveal

The visible pages are only part of a PDF. Before sending a sensitive document, check these:

• Document properties. Author, title, the software used and creation dates are stored in the file; your viewer shows them under File → Properties. PDF Hut's Merge PDF, Split PDF, JPG to PDF and Text to PDF create new documents, so the original title and author fields are not carried over. Compress PDF and Add Watermark edit the existing file and keep them.
• Comments and form data. Sticky notes, highlights and filled-in form fields travel with the file. Review them in your viewer's comments panel.
• Earlier versions. Some editors save changes by appending them to the end of the file, so earlier content can remain inside. Re-saving with Compress PDF keeps only the current version of each object.
• Fake redactions. A black rectangle drawn over text hides it on screen, but the text underneath is often still there. Test it: run the file through PDF to Text. If the "hidden" words appear in the output, the redaction failed. Use a proper redaction feature (such as the one in Adobe Acrobat), or flatten the pages into pictures with PDF to JPG and JPG to PDF, which leaves only the pixels you can see.

Mark the copies you hand out

When you have to send a copy of a passport, driving licence or bank statement – to a landlord, an employer or a service provider – it is commonly recommended to label the copy with who it is for, what it is for and the date, for example "For XYZ Lettings, rental application only, Sep 2026". A copy marked like this is much less useful to anyone who later tries to misuse it. Add Watermark stamps such a line across every page in a few seconds; converting the result to images and back afterwards makes it considerably harder to remove.

A short checklist

1. Prefer tools that process files locally, and verify it with the network or offline test.
2. For highly regulated documents, use approved offline software.
3. Close other tabs and use a window without extensions for very sensitive files.
4. Check document properties, comments and form data before sharing.
5. Test redactions with a text extractor.
6. Watermark copies of identity documents with recipient, purpose and date.
7. Clear downloads on shared computers.