Privacy & file security

Where your files are processed

There are two kinds of tool here, and each tool's page says which one it is. Our PDF and image tools — PDF to JPG, JPG to PDF, compress, merge, split and the image converters — run entirely inside your browser. Your file is read into memory on your own device, converted there, and offered straight back as a download, so there is no server copy at all.

PDF to Word, PDF to Excel and PDF to PowerPoint cannot be done reliably in a browser, so those three upload your PDF over HTTPS and convert it on our server. The PDF itself is converted in memory and is never written to storage.

Temporary results and automatic deletion

For the three server tools, only the converted result is stored, in a private area that is not publicly readable. It is kept for up to one hour so you have time to download it, then removed automatically along with its record. The download itself uses a signed link that stops working after a couple of minutes; once it has expired, or the result has been cleaned up, the file can no longer be downloaded and you simply convert again.

For the in-browser tools nothing is uploaded at all, and results are held in the page only — they are gone when you clear them or close the tab.

Private to your session

Each conversion is tied to the browsing session that started it, using a hashed identifier rather than anything that names you. Only that session can ask for the download link to its own result; a request for someone else's conversion is refused, and no result is reachable without a freshly issued signed link.

What we record

No account is needed and we never store the contents of your documents. Nothing from inside a file — no text, no tables, no images — is logged, measured or kept. What we record is limited to product measures: which tool was used, the file size, the page count, how long the conversion took, and whether it succeeded or failed.

One clarification about names: so your download arrives with a sensible name, the result keeps your file's own name with the new extension, and that download name is held in the temporary job record. It is deleted with the result within the hour, and it is never used as a storage location — stored files are named only from the job's own identifier.

Limits and safety

Server conversions accept PDFs up to 10 MB and 50 pages on the free plan (25 MB and 200 pages on Pro), and stop if a conversion would take longer than 25 seconds. Files are checked before processing begins, oversized or unsupported files are rejected with a clear message, and a converter that cannot handle your file tells you so rather than producing a broken result. Scanned, image-only PDFs have no text to read and are not supported yet.