Nothing leaves this device

A PDF workspace that lives on your device, not in the cloud.

Edit, stamp, sign, merge, number and batch-process PDFs in your browser. No upload, no account, no limits — and it keeps working when the internet does not.

Drop a PDF here or click to choose one — it opens in the editor, on this device

Nothing is uploaded. Free, and there is no account.

That stamp is drawn by the editor's own Stamp Studio, in your browser, right now. Nothing was requested from a server to make it.

0 BDocument data sent
0Uploads
Page requests
Downloaded once

These numbers come from your browser's own performance API, measured on this page as you read it — not from a claim we typed into the design.

Plainly

What it does, and what it does not.

Most tools list only the first half. Both halves are here because a claim you can check is worth more than a claim you cannot.

It does

Keeps your file on your device
Every operation runs in your browser. There is no upload step, because there is no server to upload to.
Works with no internet
Load it once and it keeps going offline. Or install it, and it opens in its own window with no connection.
Free, with no limits
No page caps, no daily quota, no watermark, no account, no email address.
Edits text already on the page
Click a line, and it is covered in the colour of the paper behind it with an editable copy on top in matched type.
Shows what is hidden in a file
Metadata naming the author, scripts, attachments, text positioned off the page — none of it visible until you look.
Checks its own work
Every export is reopened by a second engine and verified before you are told it worked.
Never touches your original
Output is always a new file. A mistake costs you a re-run, never the document.
Proves it rather than promises it
Your browser blocks transmission from the editor at the platform level. Open the network tab, or disconnect the internet and keep working.

It does not

Redact permanently
A shape over text hides it and leaves it selectable underneath. Until we can remove content and prove it is gone, the answer is no.
Read scanned pages
No OCR yet. A scan stays a picture.
Reflow a paragraph
You can replace a line of existing text and it exports as real text. What you cannot do is re-wrap the paragraph around it — that corrupts layout in ways that are hard to spot.
Convert to Word or Excel
Rebuilding an editable document needs far more compute than a browser tab should attempt.
Open a password-protected file
We cannot decrypt, so we refuse and say so rather than handing you an empty-looking file.
Sign cryptographically
Signatures here are visual. That is what most documents need, and we label it honestly.

Wondering how that compares with a tool that processes your file on its servers? The difference is set out here, including the jobs a server-based tool still does better.

The two things it does that nothing else does

Stamps you design, and recipes you can email to a colleague.

Stamp Studio

Design a stamp the way you would order a rubber one — layout, frame, ink colour, letter spacing, and a distress slider so it reads as physically inked when the document gets printed and scanned back in.

  • Variable fields like {{date}} and {{counter:4}}, resolved when the stamp is placed
  • Circular seals, ribbons, framed boxes and logo layouts
  • Export as a transparent PNG for Word, email or anywhere else
  • Bundle a set into a .stamps pack and send it to your team
Stamp maker →

Recipes

Record the sequence of things you do to every document that lands on your desk, save it as a file, and run it on one PDF or a folder of two hundred. It is a file, not an account feature — so it travels.

Recipe "Invoice intake"
1. Remove blank pages
2. Bates number INV-{{counter:4}}
3. Stamp PROCESSED {{date}} bottom-right
4. Header {{filename}} — {{date}}
5. Rename {{bates}}.pdf
  • Drop a folder in, get a ZIP out, all processed on your machine
  • Batch is free here because it costs us no CPU — everyone else charges for it
  • Share as a .recipe file: no sync, no seats, no admin
Recipes and batch →
What you get

The ordinary things, done properly.

A differentiator is worthless on top of a shaky core. These are table stakes and they are held to the same standard as everything else.

Read and navigate

Thumbnails, zoom, fit to width or page, keyboard navigation, and rendering that stays sharp on high-density screens.

Reshape the document

Reorder by dragging, rotate, delete, duplicate, extract, merge another PDF in, or split into separate files.

Mark it up

Text boxes, highlights, freehand ink, shapes, images, and a drawn signature — placed by hand or by recipe.

Fill forms

Existing AcroForm fields are detected and filled, with an option to flatten so the values become part of the page.

Number and label

Bates numbering, page numbers, headers, footers and watermarks, applied to a range or to everything.

Export and verify

Every export is reopened by a second engine and checked before you are told it worked. If a check fails, you are told that instead.

The promise, stated precisely

Your documents never need to be uploaded.

Note the wording. We do not claim zero bytes cross the network — the application itself has to reach your browser once, and any tool claiming otherwise is either wrong or counting creatively. What we claim is narrower and checkable: no document you open is ever transmitted anywhere.

Safe Mode, always on

The file you opened is never written to. Every operation produces a new file, and the new file is reopened and validated before it is handed to you. A green tick here means a second engine parsed the output — not that the code finished without throwing.

We refuse rather than fake

If a PDF has a structure we cannot safely rewrite, the app says so and stops. It will not produce a convincing-looking file that is quietly broken. A tool that silently corrupts a legal document is worse than no tool at all.

Install it once and it works with the network unplugged.

No installer, no update service, no account. Load it a single time and it keeps running on a plane, in a facility with no connection, or anywhere the signal gives out. IT departments tend to like a tool that cannot phone home.

Install itworks offline · no installer · nothing to sign up for
Open the editor How offline works
Questions

Straight answers

Are my PDFs uploaded to a server?

No. Every operation — opening, editing, stamping, merging, exporting — runs in your own browser using JavaScript. There is no upload step because there is no server to upload to. The site is static files on a CDN.

You do not have to take that on faith. The page sets a Content Security Policy of connect-src 'self', which means your browser itself will refuse any attempt to send data elsewhere. Open your network tab and watch: after the app loads, there is no traffic.

Is it really free? What is the catch?

It is free, with no page limits, no file size tiers, no watermarks and no account. There is no catch, but there is a reason: because nothing is processed on our servers, serving you costs almost nothing. Every competitor pays for CPU to convert your file, so every competitor has to meter you. We do not.

Does it work offline?

Yes. Load the page once and it keeps working with the network disconnected — on a plane, in a secure facility, on a site with no signal. You can also install it to your desktop or home screen, so it opens in its own window with no connection at all.

Can it edit the existing text in my PDF?

Yes, a line at a time. Pick the Edit text tool and click any words on the page: they are covered in the colour of the paper behind them and an editable copy appears on top in matched type, size and colour. It exports as real embedded text, so it stays searchable and selectable.

What it does not do is reflow the surrounding paragraph. A PDF usually embeds only the glyphs it already uses, so rewriting its content stream can leave a new character with no glyph at all — which is why even the most expensive desktop editors mangle this. Replacing a name, a date, a reference number or a form entry works perfectly. Re-wrapping a justified block of body copy does not, and we do not offer it.

Can it permanently redact text?

Not yet, and we would rather say so than ship a black rectangle and call it redaction. Drawing a box over text leaves the text underneath, fully selectable — that mistake has embarrassed governments and law firms with real consequences. True redaction that removes content from the page structure and then verifies the removal is on the roadmap. Until it lands, the honest answer is no.

What happens to my documents when I close the tab?

They are gone. Your file is held in the tab's memory while you work and is released when the tab closes. The only things kept in browser storage are your saved stamps, which never contain document content, and you can clear them at any time.

Which browsers and devices does it work on?

Any current browser — Chrome, Edge, Firefox or Safari — on Windows, macOS, Linux, Android and iOS. The interface adapts to phone screens, though heavy work on very large files is more comfortable on a laptop where there is more memory available.

How do I know the privacy claim is true rather than marketing?

Three ways, none of which require taking our word for it. The Content Security Policy on the editor is enforced by your browser rather than by us, and permits no other origin at all. The app carries a Local Processing Monitor listing every request the page has made, built on the browser's own performance API. And you can disconnect from the internet and keep working — software that needed to transmit your file could not.