What happens when you drop a PDF on a website
Search for a PDF merger and you will find a dozen well-designed, free, fast sites. Nearly all of them work the same way: your document is uploaded to their server, combined there, and the result is sent back for you to download.
That is not a scandal. It is how web software was built for twenty years, and for a restaurant menu it is completely fine. But look at what people actually merge: signed contracts, bank statements for a loan application, medical letters, passport and visa documents, tax paperwork, tenancy agreements.
Those files go to a company you have not researched, are stored for some period you have not read about, and are handled by staff and systems you cannot see. The site probably deletes them on schedule. You have no way to verify that, and no recourse if it does not.
The part that surprises people
A PDF merge does not need a server. It has not needed one for years.
Browsers can read a file from your disk, work on its bytes, and write a new file back, entirely locally. All the operations people want from a PDF tool are byte manipulation on a document structure: merging is concatenating page objects and rebuilding the reference table, splitting is copying a subset out, rotating is changing one number on each page.
None of that requires anything the browser cannot do on its own. The reason so many tools upload anyway is a mix of habit, older browser limitations that no longer apply, and the fact that a server gives the company something valuable: the ability to count usage, gate features, and see what people are doing.
Doing it locally
Our merge PDF tool runs entirely in your browser. You add files, drag them into the order you want, and download the combined document. Nothing is transmitted, there is no account, and there is no queue.
The order matters more than people expect, which is why the files sit in a list you can rearrange rather than merging in whatever order the file picker handed them over. Selecting several files at once in Windows or macOS returns them in an order that depends on how you clicked, not on what you intended, and a merged document with the appendix in the middle is the usual result.
The same shell handles the rest of the common jobs, so you are not learning a new interface for each one.
- **Split a PDF** into ranges: pages 1 to 3, 7, and 10 to 12 as separate documents or one extract.
- **Delete pages** when a scanner has caught the blank back of every sheet.
- **Rotate pages** where a scan came in sideways, individually or all at once.
- **Turn images into a PDF** when a form wants one document rather than four photographs.
How to check any tool for yourself
You should not take our word for this, and you do not have to. There is a test that takes ten seconds and works on any web tool that claims to be local.
Open the page and wait for it to finish loading. Then disconnect from the internet, by turning off wifi or unplugging the cable. Now use the tool.
If it works, nothing was being uploaded, because there was nowhere to upload it to. If it hangs or shows an error, your file was going somewhere. That is the whole test, and it is more reliable than any privacy policy, because it observes behavior rather than describing intent.
A more thorough version: open your browser's developer tools, go to the Network tab, and watch while you use the tool. Uploads are visible there as requests with your file's size attached.
Where local tools genuinely fall short
It would be dishonest to pretend the browser can do everything. Three things it does not do well.
Very large files. Everything happens in memory, so a 500 MB scanned archive may exhaust what the tab is allowed to use. A few hundred pages is comfortable; thousands of pages of high-resolution scans is not.
Optical character recognition. Turning a scanned image of text into selectable text needs a large model, and while it is technically possible in a browser it means a substantial download before anything happens. Desktop software is the better answer.
Password-protected documents. If a PDF is encrypted, it has to be decrypted before it can be edited, and a tool that silently strips protection would be doing something you did not ask for. Remove the password in the application that set it first.
For everything else, which is most of what people need, local is not a compromise. It is faster, because there is no round trip, and it works on a train.
A note on what merging does to a file
Merging is not lossless in every respect, and it is worth knowing what changes.
Page content, images and text are carried across intact. Bookmarks and internal links from the source documents are generally not, because their targets are being renumbered and rebuilt. Form fields can behave unpredictably if two documents happen to use the same field names, and digital signatures are invalidated by definition, since a signature certifies a specific document and the merged one is a different document.
That last point is the one that occasionally causes real trouble. If you have a digitally signed contract, merging it into a bundle breaks the signature. Keep the signed original separately.
Questions people ask
It depends entirely on whether the tool uploads. If it processes in your browser, the file never leaves your device and there is nothing to worry about. If it uploads, you are trusting a company with the document. Test it by using the tool with your internet disconnected.
Use a browser-based tool. Modern browsers can read, manipulate and write PDF files locally, so no installation and no upload is needed. Add your files, put them in order, and download the result.
No. Merging copies the page objects across unchanged, so text stays text and images stay at their original resolution. It is not a re-encode, which is why a merged file is roughly the sum of its parts in size.
Bookmarks point at specific pages by internal reference, and merging rebuilds those references. Most merge tools, including desktop ones, drop them. Page content is unaffected.
Not without removing the password first. An encrypted PDF cannot be read until it is decrypted, and a tool that stripped protection on its own would be doing something you did not ask it to. Open it in the app that set the password and save an unprotected copy.
Browser tools are limited by available memory rather than by an arbitrary cap. A few hundred pages is comfortable on any modern machine. Very large scanned archives are better handled by desktop software.


.jpeg)