Security
Your files are processed in your browser and never uploaded, so we never have access to them.
Local execution
Every tool runs inside your browser. PDFs are handled with pdf-lib and pdf.js, with tesseract.js for OCR; images with the browser's canvas and WebAssembly encoders; audio and video with the browser's own codecs through Mediabunny; archives, checksums and data formats with small libraries that also run on the page. Your file is read from your device and the result is saved back to it.
No uploads
There is no server that receives your files and no server code in this site, which is a set of static files. Nothing is uploaded, so there is nothing to retain or purge.
Kept on your device
The PDF tools keep the file you are working on in your browser's IndexedDB while this tab is open, so it is still there when you switch between them. It is removed when you close the file, or when you close or reload the tab where the browser allows it, and it is never restored in another tab. Anything left behind, for example after a crash, can no longer be opened after 4 hours and is deleted the next time you use a PDF tool. You can also clear it at any time in your browser settings. The other tools keep your files in memory only.
Requests the site makes
The OCR tool loads its recognition engine and English language data from this site, and the browser keeps the language data for later runs. Some audio and image formats load their encoder from this site the first time you use them. Face detection and background removal download their model and runtime from this site the first time you use them, and the browser caches them. Cloudflare Web Analytics counts page views and load times without cookies. None of these requests carry your files. The image metadata viewer also shows a link to openstreetmap.org for a photo's GPS position; no map is loaded, and OpenStreetMap receives the coordinates only if you follow the link.
Microphone, camera and screen
The audio, screen and webcam recorders ask your browser for the microphone, the camera or a screen to share only when you start recording. They are used only while you record and released when you stop or leave the page; the recording stays in your browser and is never uploaded. The site's Permissions-Policy allows these devices for this site only and blocks them for anything embedded.
Irreversible changes
Redact, Flatten, Grayscale and the Maximum compression setting of Compress redraw each page as an image, so redacted text is removed from the file and not just covered. Check the result before you share it.
Check it yourself
You do not have to take our word for it. Open your browser's developer tools, watch the network while a tool works, then run it again offline. The steps are in how to check whether an online file tool uploads your files.