PDF privacy and security
What Happens When You Upload a PDF Online?
By PDFOak · Published September 9, 2026 · Updated October 1, 2026
The details vary by service, which is why the useful questions are where the file is stored, how long it stays, what the logs contain, and whether a different provider receives it.
PDFOak’s server tools show their live retention statement before the file picker appears. The privacy page lists which tools upload and which do not.
A typical server conversion
Your browser sends the file over an encrypted connection. The server writes it into a temporary workspace, runs a converter, returns the output, and should clean up both the source and the result according to its stated policy.
Rate-limit and error logs can exist even when document content is deleted. A useful policy separates operational metadata from the uploaded file itself.
How PDFOak separates the two paths
Merging, splitting, page edits, compression, locking and unlocking, and image conversion run in your browser and have no document upload path. Conversions between PDF and Word, Excel or PowerPoint, and OCR, use the server.
If the server’s retention statement cannot load, the file picker does not appear, so nothing can be uploaded.
Questions a policy should answer
Look for a concrete deletion point, how backups are handled, whether subprocessors or third parties are involved, file-size limits, and whether an account is required. “Your files are secure” with no mechanism or duration is not enough to decide on.
What to do before you upload
- Find out whether the specific operation uploads at all.
- Read the retention statement before you select the file.
- Check whether processing uses third parties or persistent storage.
- Confirm how the result comes back and when temporary files are deleted.
- Choose a browser-only or approved offline route when the terms do not fit.
Frequently asked questions
Are uploaded PDFs stored permanently?
That depends on the service. Read its current retention policy before you upload, and do not assume deletion just because a download button appeared.