Why Browser-Based Tools Are Safer for Private Documents
Is it safe to upload a bank statement, ID scan or signed contract to a free online PDF or image tool? It depends on where the work happens. Many online tools send your file to their server, process it there and send back the result. Browser-based tools do the work inside the web page on your own device, so the file never has to leave it. For private documents, that second kind removes the biggest question: what happens to your file on someone else's computer.
Below is how the two approaches differ, what can go wrong with uploads, and a few checks you can run on any online tool before you trust it with something personal.
Two ways an online tool can handle your file
Upload-based tools
You pick a file, it's sent over the internet to the company's server, a program there does the merging, compressing or converting, and you download the result. This is how a lot of online converters work, and many of them are run carefully. But once your file is on their server, you're relying on them for a few things you can't see:
- How long the file is kept, and whether it's really deleted.
- Who at the company, or at their hosting provider, can access it.
- Whether the file or its contents are used for anything else, such as analytics or training.
- How well the server is protected if it's ever breached.
A good privacy policy can answer some of these, but you're still trusting a promise.
Browser-based tools
Modern browsers let a web page read a file you choose and work on it right there. The browser's File API is designed for exactly this: it lets a page access a file you've picked, either through a file picker or by dragging it onto the page, and read its contents. The page can then process the file with code that runs on your device and hand you the result as a download.
In that setup, the website still loads its code from the internet, but your document doesn't travel anywhere. There's nothing stored on a server, so there's nothing to delete afterwards and nothing to leak from it.
Why this matters most for private documents
Think about the files people usually need to merge, sign, compress or crop in a hurry:
- Passport and ID scans for a visa, rental or bank application.
- Payslips and bank statements for a loan or tenancy check.
- Signed contracts, rental agreements and HR forms.
- Medical letters, school forms and family photos.
These are exactly the documents you'd least like to sit on a stranger's server, even briefly. If a tool can do the job without receiving the file at all, that's one less place your data exists.
How KhanTools handles your files
All KhanTools tools run in your browser, and nothing you open in them is uploaded. A few examples:
- PDF Sign lets you draw your signature and stamp it onto a PDF, so you can sign a rental agreement, a permission slip or a timesheet without printing and scanning. The file never leaves your browser.
- PDF Merge joins two or more PDFs into one document in the order you choose, for when a form or employer asks for "one PDF".
- Add Text to PDF places your own text, such as a date or reference number, on any page and gives you a new copy to download.
- Image Compress shrinks, resizes and converts photos between JPEG, WebP and PNG right in your browser.
- Background Remover cuts the background out of a photo, and the AI runs on your own device instead of on a server.
Because the work happens on your device, there's also no upload wait. The trade-off is that very large files depend on your device's memory and speed.
Browser-based doesn't mean risk-free
Processing files locally solves the server question, but it's not a guarantee of everything. Be honest with yourself about the other risks:
- The website itself. A page's code could, in principle, send your file somewhere. That's why the checks below are useful for any tool, including ours.
- Your own device. If your computer has malware or is shared with others, local processing doesn't protect the file once it's saved in your Downloads folder.
- Where you send the result. Once you email the signed PDF or upload it to a portal, it's on their systems, under their rules.
- Browser extensions. Some extensions can read the pages you visit. Keep only the ones you trust.
If your employer, school or bank gives you an approved tool for handling sensitive documents, use that. For highly sensitive or regulated work, the software already installed on your computer, such as the PDF reader or photo editor that came with it, may be the better choice.
What to check before using any online tool
You don't need to be technical to run these checks. They take a minute or two.
- Read what the tool says about your files. Look for a clear statement on the tool page or in its privacy policy: are files uploaded, how long are they kept, and are they deleted? Vague wording like "we take privacy seriously" with no detail tells you very little.
- Watch for an upload step. If you see an upload progress bar that depends on your connection speed, or a "processing on our server" message, the file is being sent somewhere.
- Look at the network activity. In Chrome, press Control+Shift+J on Windows or Linux, or Command+Option+J on a Mac, to open DevTools, then click the Network tab. It only records while it's open, so open it before you add your file. Each row is a request the page makes. If you see a large request appear when you add your document, roughly matching your file's size, the file is probably being uploaded.
- Check who runs the site. A real contact page and an identifiable owner are a good sign. A site that exists only to push downloads or pop-ups is not.
- Use a test file first. Try the tool with a harmless document before you open anything personal in it.
None of these is perfect on its own, but together they tell you a lot about where your file goes.
A simple rule of thumb
For everyday files like a holiday photo or a public flyer, any reputable tool is usually fine. For anything with your ID number, account details, signature, address or health information on it, prefer a tool that processes the file on your device, check it with the steps above, and keep the original somewhere safe.
If you need to sign a document today without printing it, start with PDF Sign. If a portal wants several documents as a single file, PDF Merge combines them without sending them anywhere.
KhanTools — Free Online Web Tools
Free browser-based tools for images and PDFs. No uploads. 100% private.
Blog ·
About ·
Privacy Policy ·
Terms of Service ·
Contact
JavaScript is required to use KhanTools. Please enable JavaScript in your browser.