You search for "merge PDF" or "compress image", click the first result and drag a file into the box. A few seconds later you have what you wanted. It feels free. It is rarely worth asking where the file went, until it is a passport scan, a signed contract or a photo of your child. Free online tools are a great convenience, and most are harmless, but the way they work is not always obvious, and the difference matters. This guide explains the two main designs, how to tell them apart and what to look out for.
Two ways a tool can work
Server-based tools
With many online tools, your file is uploaded to the company's server, processed there and sent back to you. This is how most websites traditionally worked, and it is necessary for some jobs that need heavy processing. The catch is that your file sits, at least briefly, on someone else's computer. It may be stored, backed up, scanned or logged. Reputable services usually say how long they keep files and delete them, but you are relying on their promise and on their security.
Browser-based tools
Modern browsers are powerful enough to do a lot of the work themselves. A browser-based tool sends you a small program along with the page, and that program runs on your own device. The file never leaves your computer or phone, so there is nothing to intercept, store or leak. This design is also faster for many jobs because it skips the upload and download.
The tools on Tantool are built this way. Merging and splitting PDFs, compressing images, cleaning photo metadata, formatting JSON and generating passwords all run inside your browser.
Why it matters
- Privacy. Documents often contain more personal data than you realise: names, addresses, signatures, account numbers and location tags in photos.
- Data breaches. Any company that stores files can be breached. A file that was never uploaded cannot be stolen from a server.
- Legal and workplace rules. Many employers and clients forbid uploading confidential documents to unknown services.
- Speed and data costs. No upload means less waiting and less mobile data.
How to tell what a tool does
A website's claim, such as "100% private", is not proof. Here are practical checks, from the simplest to the most technical.
1. Read the page and the privacy policy
A trustworthy tool says what it does with your files, how long it keeps them and which third parties are involved. Be wary of tools with no policy or a vague one. Words such as "uploading" or a progress bar that fills while the file is sent are clues that a server is involved.
2. The offline test
Load the tool page and let it finish loading. Then turn on airplane mode or disconnect from the internet, and use the tool on a small test file. If it still works, the processing is almost certainly happening on your device. A few local tools load a library the first time you use them, so try the tool once online before testing.
3. Watch the network activity
If you are comfortable with it, open your browser's developer tools, go to the Network tab, clear the list and run the tool. A server-based tool will show a large upload request, typically a POST, whose size is about the size of your file. A browser-based tool will show little or nothing at that moment.
Exceptions you should expect
"Runs in your browser" does not mean the page makes no network requests at all. Be realistic about these:
- Libraries. Some tools load code libraries from public networks the first time, for example the PDF library or the QR code library. Your files are not sent with those requests.
- Tools that need the internet by nature. An IP address lookup has to ask a lookup service, and an HTTPS checker has to contact the site you enter. These send the address you typed, but not files.
- Ads and analytics. Many free sites show ads and use analytics, which load their own scripts and set cookies. Those are separate from the tool itself, and a good privacy policy describes them.
Warning signs
Also be cautious with tools that ask you to install software or a browser extension for a simple task, tools that redirect you to unrelated downloads, and download buttons that are really ads. If the real download link is hard to find, close the page.
How careful should you be?
Not every file needs the same care. A holiday photo is rarely a problem. An identity document, a bank statement, a contract or a medical record is. For those, use a tool that runs locally, or use software on your own computer. And whichever tool you use, check the result before you send it on.
A few extra habits
- Remove location data from photos before you share them. Our Free Metadata Cleaner does this in the browser.
- Black-out boxes drawn over text on a PDF do not remove the text underneath. Delete sensitive pages instead of covering them.
- Keep the original file until you have checked the processed copy.
- Use a modern browser and keep it up to date.
- Do not reuse a password from an important account on a free site that asks you to register.
Frequently asked questions
Is a browser-based tool completely risk-free?
No tool is completely risk-free, but local processing removes the biggest risk, which is your file sitting on someone else's server. You still need a trustworthy site and an up-to-date browser.
How can I be sure a tool does not upload my file?
Use the offline test and the Network tab check described above. Together they give good evidence.
Why are the tools free?
Many sites pay for themselves with advertising. Be cautious of free services that hide a different business model, such as selling data.
Are paid tools safer?
Not automatically. What matters is how a tool works and what its policy says.
Final thoughts
You do not need to give up convenient online tools. Choose ones that process files on your own device, read the privacy policy, run the offline test on anything sensitive and keep your guard up for unnecessary sign-ups and pop-ups. Browse the full list of free browser-based tools on Tantool and see how many everyday jobs can be done without handing your files to anyone.