Security

Client-side processing

Each tool loads an open-source JavaScript library into your browser and does the work there. Your document is read with the browser's File API, held in memory, and the result is handed back to you as a download. At no point is the file content sent to PDFQuick.

You can verify this yourself: open your browser's developer tools, switch to the Network tab, and run any tool. You will see no request carrying your document.

Transport and hosting

The site itself is served over HTTPS, so the page and its scripts cannot be tampered with in transit. Our hosting provider keeps standard access logs containing IP addresses and requested URLs.

What this does not protect against

• Malware already running on your own device, which could read any file you open.
• A shared or public computer where downloads remain on disk after you leave.
• Browser extensions you have installed, which may be able to read page content.
• Anything you do with the output file afterwards, such as emailing it to the wrong person.

Honest wording

We deliberately avoid phrases like “military-grade encryption” or “your files are deleted after one hour”. Neither would be meaningful here: there is no upload to encrypt and no server-side copy to delete.

Reporting an issue

If you find a security problem with this website, please email hello@pdfquick.app with the details and steps to reproduce. We appreciate responsible disclosure and will respond as quickly as we can.