How to Keep Sensitive Documents Private When Editing PDFs Online

Why it matters where a PDF is processed

The PDFs people edit most often are also the most sensitive: tax forms, payslips, rental agreements, passport scans, medical letters. Many online PDF services work by uploading your file to their servers, processing it there and sending a result back. That can be perfectly legitimate, but it means a copy of your document exists, at least temporarily, on infrastructure you do not control, and you rely on the provider's retention and security practices.

Browser-based processing takes a different approach. The web page downloads the program code, and the program then runs on your own device. Your document is read from your disk into the tab's memory and never needs to leave your computer.

How ModiPDF handles your files

ModiPDF uses two open-source JavaScript libraries that run in the browser: PDF.js to draw page previews and pdf-lib to build the exported document. When you add a file, it is read locally. When you click Export, the new PDF is generated in the tab and handed to your browser as a download. There is no upload step and no account, and ModiPDF does not keep copies of your documents.

The page itself does make some network requests: it loads its own code, the PDF.js worker script from a public content delivery network, and advertising scripts from Google AdSense, which may use cookies as described in our Privacy Policy. These requests fetch program code and ads; they do not carry the contents of your files. Closing or refreshing the tab clears the loaded documents from memory.

How to verify it yourself

1. Open ModiPDF and load the page fully.
2. Open your browser's developer tools (F12 in most desktop browsers) and switch to the Network tab.
3. Add a PDF, make an edit and export it.
4. Look through the requests. You should see no request that sends your document's data to a server. Alternatively, disconnect from the internet after the editor has loaded and confirm that loading, editing and exporting still work.

Good habits for sensitive documents

• Use a device you trust. A browser-based tool is only as private as the computer it runs on; avoid shared or public computers for confidential files.
• Close the tab when you are finished so the documents are cleared from memory.
• Check where your browser saves downloads, and delete working copies you no longer need, especially on synced folders.
• Share only what is necessary. Delete pages that the recipient does not need before exporting, rather than sending the whole document.
• Name files carefully. A file name like 'passport-john-smith.pdf' reveals information even before it is opened.

Know the limits of visual edits

Covering text with a filled shape hides it visually but does not delete it. The original text usually remains in the page data and can be selected, copied or extracted with other tools. ModiPDF is not a redaction tool, so if you must permanently remove information such as account numbers, use software with a true redaction feature, or remove the page entirely in ModiPDF if the whole page can go.

Similarly, a hand-drawn signature is an image, not a cryptographic proof of identity. Treat it as you would a signature on paper that was scanned.

Exporting creates a new PDF from your pages, so document-level properties from the original file, such as its title and author fields, are generally not carried over. Hidden content inside the pages themselves, such as text beneath an image, is copied along with the page.