A Private Alternative to Upload-Based PDF Sites

What is inside an ordinary PDF

Documents we treat as routine often carry more than we think: names, home addresses and dates of birth; tax file or account numbers; signatures; salaries on payslips and employment letters; medical details on forms; and hidden metadata such as the author’s name and the software used. Each upload is one more copy of that information on a computer you don’t control.

Server processing vs. in-browser processing

Neither approach is automatically “bad”. Reputable server-based services have security measures and deletion policies. In-browser processing simply removes the question: if the file is never sent, it can’t be stored, leaked or kept longer than promised.

How KitWren processes a PDF in your browser

1. You open a tool. The page loads the code it needs — a PDF engine written in JavaScript and WebAssembly.
2. You choose a file. The browser reads it from your device into the tab’s memory.
3. The tool does the work — merging, compressing, converting — inside that tab.
4. You download the result, which is created on your device.
5. Close the tab and the working copy in memory is gone.

Check it yourself

You don’t have to take privacy claims on trust. In Chrome or Edge, press F12 (or right-click → Inspect), open the Network tab, then run a tool on a document. You’ll see the page’s own files and ads loading, but no request carrying your PDF. This test works on any website, and it’s worth doing before trusting any tool with sensitive files.

When private processing matters most

• Identity documents — passport, licence and visa scans.
• Money — payslips, bank statements, tax returns and invoices.
• Work — contracts, HR letters and anything under a confidentiality agreement.
• Health — referral letters, test results and insurance claims.
• Family — school reports, custody papers, birth certificates.

Privacy habits that go with it

• Redact properly. Drawing a black box over text in some editors leaves the text underneath. Redact PDF removes it permanently.
• Share only what’s needed. Use Extract pages to send the one page someone asked for, not the whole statement.
• Password-protect sensitive files with Protect PDF, and send the password by a different channel (a text message, not the same email).
• Check the hidden details. The PDF metadata editor shows and edits the author and title stored inside the file.
• Remove location data from photos before turning them into PDFs, with the EXIF Remover.

On a shared or work computer

Because nothing is uploaded and there is no account, there’s no login to forget to sign out of and no online history of your documents. The one thing left behind is what you download: on a library or office computer, move the finished file to your own storage, then delete it from the Downloads folder and empty the recycle bin. Using a private or incognito window also stops the browser keeping a record of the pages you visited.

What in-browser tools can’t do

• They can’t keep your files for later or sync them between devices — save your results.
• Huge jobs depend on your device. A 500-page high-resolution scan may be slow on an older phone; split it first.
• They can’t protect a file after you share it. Once a document is emailed, its safety depends on the recipient.

A worked example: sending a contract safely

For the full list of tools, see free PDF tools with no upload.