A privacy statement is useful, but a sensitive workflow deserves a direct check. Browser Developer Tools can show whether a PDF page makes a network request when you open, edit and download a document.
Start with the right test file
Create a small disposable PDF containing obvious test text, not a real ID, contract, medical record or customer document. Open a private browser window with unnecessary extensions disabled. This keeps the test understandable and avoids exposing confidential information while you investigate.
Watch the Network panel
- Open Developer Tools and select Network.
- Clear the existing request list, then choose the test PDF in the tool.
- Run the edit or conversion and download the result.
- Look for a request whose size or timing matches the document. Inspect the request name, method, content type and payload.
- Repeat after reloading so cached scripts do not hide normal code downloads.
Separate code downloads from file uploads
A browser tool may download JavaScript, fonts, OCR language data or a PDF engine from a content-delivery network. Those requests do not by themselves contain your document. A file upload normally appears as a POST or PUT request with a request body, multipart form data or a payload similar in size to the selected file. The browser may also contact analytics or advertising services; that is different from transferring the PDF, but it still belongs in a complete privacy review.
Verify more than one action
Test the initial file selection, preview generation, processing action and final download. Some services upload immediately; others wait until the user presses a conversion button. If a service uses a desktop helper, browser extension or signed cloud URL, review that path too. Keep screenshots of the request list when your organization needs evidence.
What this check cannot prove
A clean browser trace is evidence for the exact page, browser and action tested. It does not audit the downloaded JavaScript, your extensions, the operating system, local backups or future releases. For high-risk documents, follow an approved security process. LyfPDF describes browser-only processing in its Privacy Policy; this test lets you check the claim for yourself.
Frequently asked questions
Does HTTPS prove local processing?
No. HTTPS protects data in transit; it does not show whether the file was transmitted.
Can I test with a real confidential file?
Use a harmless test PDF first. A privacy check should not create the exposure it is meant to prevent.
More in this topic cluster
Return to the pillar guide and choose the next verified workflow.
Remove PDF Metadata Before SharingReview and clear author, creator, title, keyword and date fields before sharing a PDF outside your organization.
How to Redact a PDF SafelyUnderstand the difference between visual covering and secure information removal, then verify a redacted PDF before sharing.
Password-Protected PDF Safety GuideHandle encrypted and password-restricted PDFs without bypassing access controls or weakening the only protected copy.
Confidential PDF Sharing ChecklistUse a repeatable pre-send checklist for confidential PDFs, including recipient, redaction, metadata, filename and delivery checks.
Keep an untouched source and verify the downloaded copy. This guide is educational, not legal, compliance or professional certification. Read the LyfPDF Disclaimer.