Local by design

Our privacy promise

Your files are processed in your browser. We do not upload file contents to a processing service, and you do not need an account.

What stays in this session

The PDF workflow keeps your working file and exact target strings in the current session. Target strings are not included in downloaded check records. Choosing a different file or changing the work requires a fresh output check.

Check the local processing claim

Use your browser's Network panel to observe requests while processing a file. Loading the page and its required resources can use the network. After required resources are loaded, supported processing can continue offline.

Output checks have limits

PDF redaction and metadata removal support basic, unencrypted files up to 50 pages and 25 MiB. Files containing annotations, links, forms, attachments, actions or layers are unsupported and stop before export. The final output is reread for supported checks; passing results apply only to the stated scope.

Redaction rebuilds every output page as an image in a new PDF. Unboxed areas retain their visible appearance, but all pages lose searchable and accessible text. Metadata removal retains supported page content. No OCR is run, so open the downloaded PDF and visually review every page. A file hash identifies the output; it is not a safety certificate.

Read the methodology

Review before sharing

Automated checks do not replace review for missed sensitive information or inference from remaining content. Use a workflow appropriate to the requirements of your document.

Legal / compliance use case

When you need compliance-grade redaction

This tool permanently removes text via rasterization — right for everyday sharing. For legal filings, regulated industries, or documents that require auditable proof that content is gone, a desktop tool like PDFelement's Redact feature verifiably purges text at the document layer, with a sanitization log you can show counsel.

Try PDFelement freeFree trial

Sponsored · affiliate link · we earn a commission at no cost to you

Related privacy products

These optional third-party links may earn us a commission. They do not affect file processing.

Proton

Found email addresses in a file? Proton is the privacy ecosystem to move that exposure into: encrypted mail, aliases, calendar, drive and VPN under one account. Best when email privacy is the actual problem; skip it if you only needed a one-off PDF cleanup.

NordVPN

Doing privacy-sensitive work away from home? A VPN encrypts your connection on untrusted or public Wi-Fi so the network can't see what you handle. NordVPN is a long-trusted, independently audited option — most useful if you work with sensitive files on the move; skip it if you only ever work on your own trusted network.

Incogni (by Surfshark)

Stripped a file's metadata, but your home address, phone, and email are still sitting in data-broker databases anyone can buy? Incogni (by Surfshark) automatically files removal requests across hundreds of brokers and keeps them from re-listing you — and the plan bundles a VPN to mask your IP. Best if you post publicly or have been doxxed; not needed if you keep a low profile.