You drag a PDF into a free online compressor. A progress bar fills. A few seconds later, your smaller file downloads. Simple, right?
Here's what you don't see.
Step 1: Your File Leaves Your Device
The moment you click upload, your file is copied and sent over the internet via HTTPS. It's encrypted in transit — but it still arrives on someone else's computer.
The server receives:
- The full file contents
- Your IP address
- Your browser type and operating system
- A timestamp
- Sometimes a session ID or cookie
Step 2: The Server Stores It (Temporarily or Not)
Most services claim they delete files after processing — "within one hour," "immediately after download," "never stored permanently."
But storage is cheap. Logs are easy to keep. Privacy policies change. Companies get acquired. Data breaches happen.
Even "temporary" storage means your file existed on a disk you don't control, in a jurisdiction you didn't choose.
Step 3: Processing Happens on Their Hardware
Your file is opened by software running on their server. That software might:
- Extract text for OCR or indexing
- Scan for malware (reasonable) or content (less reasonable)
- Log file metadata — page count, image dimensions, embedded fonts
- Queue your file for batch processing with thousands of others
You can't see what the software does. Closed-source server code is a black box.
Step 4: The Result Returns to You
Your processed file downloads. The original may or may not be deleted. You have no audit trail.
What They Might Do With Your Data
Honest services process and delete. But the business model of "free" tools often includes:
- Analytics — how many files, what types, from which countries
- Advertising — free tools are often ad-supported; your usage feeds targeting
- Upselling — "upgrade for larger files" means they know your file sizes
- Training data — some terms of service allow using uploaded content to improve services
- Legal requests — servers in many countries can be subpoenaed
The Alternative: Nothing Leaves Your Device
Browser-based tools work differently:
- The page loads JavaScript and WebAssembly code into your browser
- You select files from your device — they stay in browser memory
- Processing runs on your CPU, in a Web Worker
- You download the result directly from memory
No upload. No server copy. No third-party storage. The tool provider never sees your file.
How to Protect Yourself
- Assume uploads are copies — once sent, you can't unsend
- Read privacy policies — look for "upload," "store," "retain"
- Use local tools for sensitive files — taxes, medical, legal, identity
- Prefer browser-based tools — watch the Network tab and verify claims yourself
Try It Yourself
BrowserStay processes everything in your browser. PDF tools, image tools, and more — no uploads, no accounts, free forever. Your files never leave your PC.
No comments yet