What “files stay on this device” actually means

We used to put “100% secure” on the home page. That is a marketing phrase, not a security audit. AdSense and common sense both want a clearer sentence.

Dropped files are processed in the tab. We do not operate a Pi2PDF upload pipeline that stores your PDF on our disk so we can convert it. That is the claim we can stand behind.

What can still leave the browser

Google AdSense may set cookies and collect device signals to show ads. Ads do not receive the bytes of the file you dropped.

A visit counter may increment a number. Voice dictation often uses the browser vendor’s speech service. OCR may fetch a model file. The privacy policy lists these. If a document is classified, do not use a random website at all — including this one.

What you should still do

Keep your own backup. Download the result before you close the tab. Use a password manager for PDF locks we apply in the browser; we cannot recover a password we never saw.