Skip to content
PDFtoOne

Security

Your files never leave your device.

Your files

Files are processed inside your browser's secure sandbox, the same protection that keeps every website apart from your phone's apps and other sites. There is no upload, so there is no copy of your file on any server to leak.

The website

  • Every page is served over HTTPS only.
  • A strict Content Security Policy allows code to load only from our own domain, so injected scripts are blocked.
  • Camera, microphone and location access are switched off for the site; the scanner uses your phone's own camera app.
  • All libraries are bundled and served by us, not loaded from third-party code servers, and are kept up to date.
  • PDFs are opened with script features turned off, and damaged or malicious files are rejected safely.
  • There are no passwords, keys or secrets in our website code.

Reporting a problem

Found a security issue? Please write to security@pdftoone.com. See also security.txt.