Skip to content
pdfKOM

Privacy

Short version: your PDFs are processed inside your browser and are never uploaded to pdfKOM or anyone else.

How processing works

When you open a tool, your browser downloads pdfKOM's application code (HTML, JavaScript, WebAssembly and fonts) from our static hosting on Cloudflare Pages. When you choose a file, it is read directly from your device into your browser's memory. Merging, splitting, compressing, encrypting and rendering previews all run on your device, using these open-source engines:

  • PDF.js (Mozilla) to display pages and thumbnails
  • pdf-lib to edit and build PDFs
  • qpdf, compiled to WebAssembly, for encryption, decryption and lossless optimisation

The finished file is created in memory and saved with your browser's normal download function.

What we don't do

  • We don't upload, store or keep copies of your documents.
  • We don't send file names, file contents or document metadata to any server or third-party service.
  • We don't use external PDF processing APIs.
  • We don't require an account and we don't set cookies.
  • Passwords you enter in Protect or Unlock PDF are used only in your browser and are never transmitted.

What is still sent over the network

Like any website, loading pdfKOM means your browser requests pages and assets from our hosting provider (Cloudflare). Cloudflare can see standard connection information such as your IP address, browser user agent and the pages you request. It cannot see your documents, because they never leave your device.

The site sends a Content-Security-Policy that only allows network connections back to pdfKOM's own origin, so your browser blocks the page from sending data to any other server.

What your browser remembers

pdfKOM saves one flag, pdfkom-visited, in your browser's local storage so the homepage can show a shorter introduction on your next visit. It contains no information about you or your files, it stays on your device, and it is never sent to us or anyone else. Clearing your browser's site data removes it.

Analytics

pdfKOM has no analytics. If we add aggregate, privacy-friendly analytics later, they will never capture document contents, file names or document metadata, and we will update this page.

Limitations

  • Sign PDF adds a visual signature, not a certificate-based digital signature.
  • Redact PDF removes content from the pages it rebuilds and checks that no text remains on them, but you are responsible for covering everything sensitive. Its “mask only” mode is not secure.
  • Permission restrictions set by Protect PDF are not enforced by all PDF readers; the open password is what encrypts the file.