Privacy Risk Scanner
Privacy Risk Scanner is a local leak-and-identifier pass. It highlights text-layer matches, reports metadata and hidden text, then rasterizes confirmed hits so those tokens cannot be copied from the download.
Privacy and offline checks
Document processing runs locally in supported PDFForge workflows. This panel is a diagnostic view; it cannot prove that no data left the device.
Observed resource activity
0 observations in this page session · 0 need inspection
Resource timing is unavailable in this browser. Use the independent checks below.
Page timing and the active service worker report different surfaces and may observe the same request. Worker activity can be incomplete; WebSockets, request bodies and extensions are outside this view. The latest 60 sanitized observations stay in memory only. URLs, filenames, query strings, document content and byte counts are not recorded here.
Verify independently in DevTools
- Use a clean browser profile and synthetic documents. Open Network in DevTools and enable Preserve log.
- Prepare offline below. Switch Network to Offline, then reload the saved workspace and select a new file.
- Inspect, redact, run output checks and download. Inspect failed requests and request payloads, including worker requests. A same-site request can still transmit data.
- Inspect Application or Storage. Cache Storage should contain public app assets and setup records only. Document recovery and content telemetry are disabled; recipe settings are saved only after opt-in.
Offline readiness
Full workspace not prepared for offline use
English OCR not prepared for offline use
Prepare while connected to save the workspace, tools, fonts and workers. English OCR is optional. Only public app assets are saved; documents, outputs and passwords are excluded. Browser storage can be cleared or evicted. Check saved assets before disconnecting and prepare again after an app update.
Checking saved app assets…
Open saved workspaceReady for local work · One heavy job at a time in this tab
Drop your PDF file here, or browse
Supports standard PDF documents • Up to 100 MB
- • Aadhaar Number
- • PAN Number
- • Credit / Debit Card
- • Bank Account
- • Passport Number
- • Email Address
- • Phone Number
- • IFSC & GST Codes
- • UPI ID
- • Hidden Metadata
- • Embedded URLs & IPs
- • Invisible Text Layers
- • Date of Birth
Private by design. Document processing runs in this browser. PDFForge has no document upload API.
How it works
How Privacy Risk Scanner works
Privacy Risk Scanner is a local leak-and-identifier pass. It highlights text-layer matches, reports metadata and hidden text, then rasterizes confirmed hits so those tokens cannot be copied from the download.
Guided steps
How to use Privacy Risk Scanner
- 1Drop a PDF from your device. The scan runs in this tab.
- 2Review highlighted identifiers and structure notes.
- 3Uncheck any match you want to keep visible.
- 4Download a redacted copy. Confirmed regions are rasterized and common metadata is stripped.
In this tab
What stays in this browser
The file stays in this tab.
- What this tool reads
- The text layer and document structure used to find identifiers such as Aadhaar, PAN, GST, IFSC, UPI, cards, emails, and phones, plus metadata and hidden text notes.
- What the download contains
- A report on this page. A download is a rasterized PDF of the hits you confirm.
Questions
Privacy Risk Scanner FAQs
Does the scanner upload my PDF?
No. Pattern matching, metadata inspection, and redaction run in this browser tab.
Will every Aadhaar or card number be found?
Only selectable text is searched, with checksums for Aadhaar and payment cards. Scans without a text layer, split glyphs, or unusual spacing can miss hits. Use Redact PDF to draw a box instead.
Is the download a guarantee of emptiness?
No. Confirmed tokens are rasterized black and common metadata is cleared. Unknown encodings, images of text, and some objects can remain. Spot-check the file before sharing.
Continue locally
Related tools
Stay in the browser with these nearby PDFForge tools.