Why local PDF→image tools matter
“PDF to JPG online” usually means: upload → server render → download. That is fine for public flyers. It is a poor fit for contracts, IDs, medical letters, or drafts you would not paste into a random chat. A local tool reads the file with the browser File API and never sends the bytes to our servers. That is the privacy story for LocalPdfImg: PDF→image stays in the tab.
Private PDF to image without uploading
This guide explains what “local” means for the converter, what Cloudflare hosting can still see, and how to prove the no-upload claim in DevTools. Job walk-throughs live on JPG for email, slides as images, and form screenshots. The hands-on Network checklist is the trust page.
What “local” means here
- Processing runs in this tab with vendored pdf.js (canvas render) and JSZip (multi-page ZIP).
- Closing or reloading the page clears the selection and in-memory results. There is no project library on our side.
- Hosting still uses Cloudflare Pages for the static HTML, CSS, and scripts. Request logs for those assets are normal and do not include your PDF payloads.
- You can prove the no-upload claim yourself on the trust page (DevTools → Network).
Loading the page fetches the app: HTML, CSS, pdf.js, the worker, and JSZip from this host. That is not your document. After you drop a PDF, you should not see a POST or PUT of those bytes. Downloads are blob: URLs created in the tab.
Sensitive-document habits
Prefer a local convert when the PDF includes personal identifiers, draft contracts, or anything your organization treats as confidential. Soft size limits (~40 MiB per PDF, ~50 pages per run) are honesty about browser memory — not an invitation to push huge scanned archives into a tab on a shared phone.
Local processing is still a browser. Extensions, malware, or a screen recorder you installed can see what the tab can see. LocalPdfImg does not receive the file, and it does not claim to block other software on the device.
Practical habits that stay within this tool’s honesty: use a non-sensitive sample the first time you learn the Network panel; convert only the pages you need; keep the original PDF when policy requires it; do not email the PDF to the contact address to “prove” a bug.
What hosting and analytics can still see
Cloudflare Pages may process standard request logs (IP address, user agent, page URL) for security and delivery. Optional Cloudflare Web Analytics may record aggregate page views without cookies or cross-site tracking. Neither product is a document store of the PDF you dropped. The short policy is privacy. Response headers set a Content-Security-Policy with script-src 'self'; this pages.dev experiment does not ship advertising scripts today.
Worked privacy check before a sensitive convert
Use a tiny public PDF or a throwaway one-pager the first time you learn DevTools. Open the tool, open Network with Preserve log, reload, drop the sample, convert one page, and confirm there is no POST of the file. Expected rows are same-origin assets: HTML, CSS, tool.js, pdf.js, the worker, JSZip, and maybe a Cloudflare Web Analytics beacon. Then — and only then — convert the sensitive packet with the same browser session habits.
If anything looks wrong, stop and write to contact@localpdfimg.pages.dev with the page URL and what Network showed, without attaching the document. Publisher context lives on about; the short policy is privacy.
What we do not claim
- Not a substitute for your organization’s DLP tools, MDM policy, or certified archival imaging.
- No claim of 等保 certification, e-discovery readiness, or regulatory compliance.
- Not a DRM bypass, password cracker, or “unlock any PDF” service.
- Not a PDF merger or splitter — those are different jobs; keep each tool focused so privacy copy stays accurate.
- If a document must never touch a browser, use offline desktop software on a machine that matches your policy.
Local convert is not a merger
People sometimes ask a PDF→image tool to also combine packets. Keeping merge out of this product is deliberate: a focused engine makes the Network story simpler to verify. If you need merge, reorder, or split, use a dedicated local merger. LocalPdfImg stays on raster page export so guides, privacy copy, and the trust checklist stay accurate.
Related pages
Related: privacy policy · JPG for email · terms · about · contact.
Sources
- MDN — Using files from web applications: developer.mozilla.org/…/Using_files_from_web_applications
- MDN — File API: developer.mozilla.org/…/File_API
- Mozilla pdf.js (runs in the page): mozilla.github.io/pdf.js
- JSZip: stuk.github.io/jszip
- Cloudflare privacy policy (hosting / optional Web Analytics): cloudflare.com/privacypolicy
- Cloudflare Web Analytics about: developers.cloudflare.com/web-analytics/about
- Chrome DevTools — Network panel: developer.chrome.com/docs/devtools/network
- Firefox — Network Monitor: firefox-source-docs.mozilla.org/…/network_monitor
FAQ
Why use a local PDF to image tool for private documents?
Upload converters receive a full copy of the file. A local tool reads the PDF in the tab and does not post those bytes to our servers. That reduces exposure for contracts, IDs, and drafts — within the limits of a normal browser.
How do I verify nothing was uploaded?
Follow the trust steps: DevTools → Network while you convert. Expect same-origin page assets, pdf.js, the worker, and JSZip. Do not expect a POST of your document.
Does “local” mean nothing on my computer can see the PDF?
No. It means this site does not receive the file through the page. Extensions or other software on the device can still observe the tab. We do not claim to defeat that.
Is LocalPdfImg certified for compliance or archival imaging?
No. It is a browser utility for rendering pages to PNG/JPG. Use dedicated compliance tooling when your policy requires it.
What about Cloudflare hosting logs?
Static asset requests can appear in edge logs. Those logs are about delivering HTML and scripts. They do not include the PDF payloads you drop into the tool. See the privacy policy.
Can I use this to unlock someone else’s encrypted PDF?
No. Encrypted files that cannot be opened fail locally. Unlocking or DRM bypass is outside the product and the terms.