People merge some pretty sensitive stuff: tax returns, bank statements, medical forms, contracts, scans of passports and driver's licenses. So it's a fair question whether pasting all of that into a free website is a good idea. The honest answer is that it depends almost entirely on one thing: whether the site uploads your file.
Two kinds of online PDF tools
Upload-based tools
This is how most online PDF tools have worked for years, including the old version of this site. You pick a file, it gets uploaded to the company's server, the server merges or compresses it, and you download the result.
That's not automatically bad. Plenty of reputable services do it carefully and delete files after an hour or so. But it does mean:
- A copy of your document sits on someone else's computer, at least for a while.
- You're trusting their security, their deletion promises, and every employee and contractor with access.
- If their server gets hacked, or a bug exposes the uploads folder, your file is in the blast radius.
- Your file travels across the internet twice, up and back down.
In-browser tools
Modern browsers are powerful enough to do the PDF work themselves. With an in-browser tool, the website sends your browser some code, and that code processes your file on your own device. The file never goes to the server, because the server doesn't need it.
This is how JoinPDFs works now. Every tool on the site, from Merge PDF to Sign PDF, runs in your browser. We couldn't look at your files even if we wanted to, because they never reach us.
The 30-second airplane mode test
Here's a simple way to check any PDF site, not just ours:
- Open the tool's page and let it load fully.
- Turn on airplane mode, or unplug your network cable, or turn off Wi-Fi.
- Try to merge, compress or convert a file.
If it still works with no internet connection, your file can't have been uploaded. It was processed on your device. If it fails, spins forever or shows a connection error, the site needs to send your file to a server.
(One small note: a few sites may load some code only after you pick a tool. Load the exact tool page you'll use before you go offline.)
Checking with developer tools
If you're a little more technical: open your browser's developer tools (F12 on Windows, Option-Command-I on a Mac), click the Network tab, then run the tool. An upload-based site will show a big request going out with roughly the size of your file. An in-browser tool won't.
Other things worth checking
- HTTPS. The address should start with https and show a lock icon. Pretty much every legit site does this now.
- A real privacy policy that says what happens to files. Vague is a red flag. Ours is at our privacy policy.
- No surprise sign-ups. If a "free" tool makes you hand over your email to download your own file, ask yourself what else they want.
- No downloads you didn't ask for. A merge tool should give you a PDF, not an .exe "helper" or a browser extension.
What about ads and tracking?
Free sites have to pay the bills somehow, and for most of them (including us) that's ads. Ads and analytics can use cookies to see which pages you visited, which is a separate issue from your files. Ads on an in-browser tool can't see the PDFs you process, since the files stay in your browser's memory and never become part of the page or get sent anywhere. If you'd rather not be tracked, a privacy-focused browser or content blocker handles that.
What happened to the old JoinPDFs
Full disclosure: the old version of this site was upload-based. Files went to our server, got merged there and sat in a folder until they were cleaned up. When we rebuilt the site in 2026, we went fully in-browser, partly because it's faster, and partly because the safest file to protect is the one you never receive.
So, is it safe?
For an in-browser tool, it's about as safe as using a desktop app, because that's basically what it is: an app that happens to load from a website. For an upload-based tool, it comes down to how much you trust that company with that particular document. A recipe? Who cares. A scan of your passport? Maybe think twice.
Either way, the airplane mode test takes half a minute and tells you exactly which kind you're dealing with.