“Free online” tools are everywhere — convert this, compress that, merge these. Most of them work fine. The problem is what happens to your file the moment you hit “upload.”
Search for something like “compress PDF online” and you’ll get pages of free tools that do the job in seconds. They’re genuinely useful, and most are run by honest people. But the convenience hides a trade-off that’s easy to miss: to use the vast majority of them, you have to hand your document to a server you know nothing about. For a holiday photo, that’s no big deal. For a signed contract, a bank statement, or a scan of your passport, it’s worth pausing on.
What actually happens when you “upload”
With a typical online utility, the steps behind the scenes are:
- Your file is transmitted, in full, to the company’s server.
- It’s written to disk there so the server can process it.
- The result is generated and sent back to you.
- At some point — an hour later, a day later, or according to whatever the policy says — the original is supposed to be deleted.
That last step is the one you simply have to take on faith. You can’t see their servers, you can’t audit their logs, and you have no way to confirm your file was actually removed rather than copied, cached, or backed up first. “We delete your files after an hour” is a promise, not a guarantee.
The risks that come with that
1. Data exposure
Every file you upload is one more copy of your data sitting on someone else’s infrastructure. If that company is breached — and breaches happen to careful companies too — your document is part of the spill. The safest file is the one that was never uploaded in the first place.
2. Quietly broad terms of service
Some free tools fund themselves in ways that aren’t obvious. Buried in the terms, you may be granting them a licence to store, analyse, or otherwise use what you upload. You’re rarely reading the fine print when you just want to shrink a PDF — which is exactly when it matters most.
3. Sketchy sites and bundled junk
Because “free file converter” is such a high-traffic search, the space attracts low-quality and outright malicious sites. Some push aggressive ads, deceptive “download” buttons, or pop-ups that try to install something. Others are thin wrappers built only to harvest uploads. A clean-looking interface is no guarantee of a clean operation underneath.
4. You lose control the instant you click
Once a file leaves your device, it’s out of your hands. You can’t un-send it. Whatever happens next — storage, sharing, analysis — is decided by someone else’s systems and someone else’s policies.
How to tell whether a tool is actually safe
You don’t have to give up free tools — you just have to choose ones that don’t need your file in the first place. A few quick checks:
- Does it upload at all? The safest tools process your file in your browser, on your own device. Nothing is transmitted.
- The disconnect test. Load the page, then turn off your internet. If the tool still works, the processing is genuinely local — proof your file isn’t being sent anywhere.
- Does it demand an account? Sign-up walls usually mean your activity is being tied to an identity and stored.
- Is the interface trying to trick you? Multiple “Download” buttons, countdowns, and fake system warnings are red flags. Honest tools don’t need dark patterns.
The local-first alternative
Modern browsers are powerful enough to do most everyday file tasks — compressing, merging, converting, signing — entirely on your own machine, with no server involved. When the work happens locally, the whole category of “what did they do with my upload?” risk simply disappears, because there was no upload.
That’s the principle Moriaki PDF is built on: every tool runs in your browser, your files never leave your device, and you can run the disconnect test yourself to prove it. If you’re curious how that works under the hood, I wrote about it in how Moriaki PDF works.
None of this means every online utility is dangerous. It means the question is worth asking — especially for anything you wouldn’t want a stranger to keep a copy of. When a tool can do the job without ever seeing your file, that’s the one to reach for.