Does PDFSpruce upload my PDF?

No. PDFSpruce reads selected files into browser memory and processes them on your device. The public website and PDF editor run on separate origins; document data is not sent to the outer page.

Implementation reviewed September 20, 2026. This explanation is not an independent security certification.

What happens when I choose a file?

1. Your browser gives the editor access to the files you select. It does not grant access to every document on your device.
2. PDF.js renders previews. QPDF WebAssembly and PDF libraries assemble pages and apply supported changes locally.
3. Export creates a downloadable file in the browser. Your original file is not overwritten.

Why is the editor on a different address?

The public website is hosted at pdfspruce.com; the editor is embedded from folio-pdf.tanzirhasanhasan.workers.dev. Browsers enforce a same-origin boundary between them. The public page does not have a document-data messaging bridge to the editor. Future advertising belongs outside the editor.

How can I check for document uploads?

Use a harmless test document rather than sensitive paperwork. These steps help you observe one session; they do not prove every possible behavior of a website.

1. Open PDFSpruce in Chrome or another browser with developer tools. Open the Network panel before choosing a file and enable Preserve log if available.
2. Clear the network log after the initial page loads. Create a test PDF with a distinctive, non-sensitive phrase, then choose it in the editor.
3. Add a mark, rotate a page and export. Inspect requests across all frames and request types, not just Fetch/XHR. Code, fonts, rendering assets or browser-extension requests can still appear.
4. Examine unexpected outgoing request URLs and payloads for the test filename, document content or file bytes. Expected application asset downloads do not mean the PDF was uploaded. A browser blob download is created locally.

Does local processing make visiting anonymous?

No. Cloudflare receives ordinary web requests, including IP addresses. No live ads or analytics are currently enabled. Local document processing also does not protect against malicious browser extensions, compromised devices or someone viewing your screen.

Can I recover a document after closing the tab?

No saved document history is provided. Download your work before refreshing or closing the editor. Downloaded files remain on your device until you remove them.

Technical background

The browser mechanisms are described in MDN’s File API documentation and same-origin policy documentation. These explain browser behavior; they do not independently certify PDFSpruce.

Read our privacy information, check supported features and limits, or choose a PDF guide.