Updated 23 October 2026
Understand local and remote PDF privacy
Follow a PDF from local file or public URL to PDF.js, and understand browser memory, Cloudflare fetching, analytics and download boundaries.
Open PDF ConverterLocal input stays in the browser
Selecting, dropping or pasting a local PDF gives this page access to that file. PDF.js parses it with browser workers, renders pages to a canvas, and encodes image blobs. Local PDF content and generated images are not sent to a conversion server.
The page and PDF.js runtime assets still load from the site. Browser permissions, extensions, downloaded files, clipboard history and other software are separate privacy boundaries. Local processing does not make a compromised device safe, and exporting an image is not a redaction method.
A remote URL takes an extra route
For a public URL, the browser sends the address to the same-origin download API. A Cloudflare Pages function and dedicated Worker receive the URL and PDF bytes; the Worker downloads and validates the document, then sends it to PDF.js in your browser. Those server components necessarily see the remote document.
The gateway does not persist or cache PDFs, uses no-store responses and excludes document bodies and full URLs from application logs. It still processes network metadata to serve requests and prevent abuse. The remote host receives a gateway request for the submitted URL. Query-string tokens are part of that URL, so do not treat signed links as anonymous.
Storage and third-party measurement
The app keeps queue data and imported URLs in page memory. Theme and language choices use browser storage; explicit language selection also sets a first-party cookie. Clearing results releases app references to completed document results; it does not delete files you already downloaded or copied.
Configured converter pages may load GA4. Its cookies and page/device information are distinct from PDF conversion, and the app does not intentionally attach PDF content or imported URLs to analytics events. AdSense is disabled. Read the Privacy policy for service-provider details and future advertising consent requirements.