Is it safe to upload files to an online converter?

The file what is in it? Would you email it to a stranger? yes no Any reputable converter is fine Use one that does not upload it

The honest answer is that it depends on the file, and that almost nobody asks the question in a form that can be answered. "Is it safe" is not checkable. "Does this tool send my file anywhere, and can I verify that myself" is — and it takes about ten seconds.

What normally happens to an uploaded file

A conventional online converter is a web form in front of a server. Your file is sent over HTTPS, written to disk on a machine you do not control, processed, and offered back as a download. A reputable operator deletes it soon afterwards and says so in its privacy policy. That chain is fine for most files and most people, and the vast majority of the time nothing whatsoever goes wrong.

What is worth understanding is that "deleted afterwards" is a promise, not a mechanism. You cannot verify it from outside. Backups, logs, error captures and third-party infrastructure all sit between the promise and the reality, and none of them are visible to you. Again: usually fine. But it is a promise.

The questions that actually have answers

Three of them, and you can answer all three without trusting anybody:

  • Does the file leave the browser at all? Open your browser's developer tools, switch to the Network tab, and run the conversion. If the file is being uploaded, you will see a request carrying it — the size gives it away immediately. If nothing of that size goes out, nothing of that size went out.
  • Does the page say what it does, before you start? A tool that tells you where processing happens before you drop the file is making a claim you can check. One that mentions it only in a policy page is not.
  • Does it admit the exceptions? No converter runs everything locally. Video encoding, full office-document conversion and machine translation genuinely need a server. A site claiming that everything is private is either using a narrow definition or hoping you will not ask.

The ten-second test

  1. Press F12 (or Cmd-Option-I on a Mac) and open the Network tab.
  2. Drop your file on the tool and run it.
  3. Sort the requests by size.

If your 4 MB PDF was uploaded, there is a 4 MB request. If the largest thing that left is a few kilobytes of analytics, the file stayed with you. This works on any converter, including this one, and it is the only claim about privacy that does not require taking somebody's word.

When it genuinely does not matter

Most files are not sensitive. A holiday photo, a public brochure, a menu, a screenshot of a bug — if you would email it to a stranger without thinking, the upload question is academic and you should just use whichever tool is fastest.

Where it starts to matter: contracts and NDAs, medical letters, payslips and bank statements, identity documents, unpublished work, anything under an obligation to a client, and anything your employer would consider a data-transfer event. For those, "probably deleted" is a different proposition than "never sent".

What we do, including the part that is not flattering

On this site, 103 of the 126 tools run as compiled WebAssembly inside your own browser tab. The file is read, converted and handed back without a byte of it leaving your machine, and the network test above will show you exactly that.

The other 23 do upload, because they need something a browser does not have — a full office engine, a media encoder, a translation service. We list every one of them by name rather than rounding the claim off, and each tool page says which kind it is before you choose it. The full list is here, along with the things competitors do that we cannot.

That is the whole argument, and it is deliberately checkable rather than reassuring.

A note on files you should not upload anywhere

Some documents should not go into any online tool, ours included, regardless of where processing happens — because the risk is not the tool, it is the policy you are subject to. Patient records under HIPAA, material non-public information, classified or export-controlled material, and anything your organisation's data-handling rules cover: use whatever your employer has approved, and ask if you are unsure. A browser-based converter removes the upload; it does not remove the obligation.

Tools used in this guide

Advertisements

← All guides · corrections: editorial policy