How to get PDF jobs done without uploading anything, and what we learned building a PDF toolkit that runs entirely in the browser.
2026-09-15
Every PDF site says your files are safe. We measured what they send: the same two synthetic PDFs, every request body counted, then the same job with the wifi off. The results, per site, with the method to reproduce them.
2026-09-15
Most 'edit a PDF' jobs are one of seven things, and all seven can be done in your browser without the file leaving your machine. Which tool for which job, and the honest answer on editing the text itself.
2026-09-15
Merging is the most common reason people upload confidential paperwork to a stranger's server. It doesn't need one. Step by step, with the checks that prove it.
2026-09-15
Uploading a document to redact it is backwards: the whole point is that the contents are sensitive. How to do it locally, and why a black rectangle is not a redaction.
2026-09-15
A signature page shouldn't cost you an account and a copy of the contract on someone's server. The local way, and the honest line between a drawn signature and a digital certificate.
2026-09-08
Every test was green locally. In production, half the app was dead — blocked by our own security header. What 'wasm-unsafe-eval' does, and why only a live test run caught it.
2026-09-08
Drawing a black box over text doesn't remove it — that's how real court filings leak. On building redaction as destruction, and a verifier that treats its own output as untrusted.
2026-09-08
'Works offline' is easy to claim and easy to get subtly wrong. The gap between runtime caching and a real first-visit guarantee, and the build pipeline that closes it.