What Smallpdf does well
Straight answers first: Smallpdf is a legitimate, mature product. TLS-encrypted transfers, ISO 27001 certification, GDPR compliance, a documented deletion policy (files deleted within an hour on free tools), and the widest tool range in the category — 20+ tools including compression, Word/Excel conversion and e-signing. For non-sensitive documents, it's a perfectly reasonable choice and this page isn't here to trash it.
The one structural difference
Smallpdf's own FAQ is clear about the model: files are uploaded to their cloud, processed there, and deleted (within an hour on free tools; longer where accounts are involved). Encryption protects the pipe — but the file still arrives, in full, on machines you don't control, processed under a policy that can change, with backups and sub-processors layered around it.
Untracked's PDF tools have no such step, because they have no such server. The free PDF merger is a web page containing the entire tool: your document opens, gets reorganised, and saves — all inside your browser. Load it, disconnect your Wi-Fi, keep working. There is no upload to encrypt, retain, or delete, because there is no upload at all.
Side by side, honestly
| Smallpdf | Untracked tools | |
|---|---|---|
| Where files are processed | Smallpdf's cloud servers | Your browser / your device |
| File ever uploaded? | Yes — every tool | Never — no server exists to receive one |
| Tool range | 20+ (compress, convert, sign, OCR…) | Focused: merge, split, reorder, delete, extract |
| Free tier | Limited tasks/day, some features gated | 3 files/day, no watermark, no account |
| Paid model | Subscription (Pro, monthly/annual) | €9 once — own it forever |
| Works offline? | No (cloud by design) | Yes — the download needs no internet at all |
| Verifiable privacy | Trust the policy + certifications | Watch the network inspector: zero requests |
When each is the right answer
- Use Smallpdf for the long tail it does well — compressing a scan, converting to Word, signing a form — when the document is one you'd be comfortable emailing to a stranger's server anyway.
- Use a no-upload tool when the document is the reason you're cautious: contracts, ID scans, financial records, anything under NDA. For pure page organisation (merge, split, reorder, extract), you lose nothing by keeping the file local — the browser does the whole job.
Deeper background on the upload question: keeping documents private online.