The cost of uploading your PDF
The free PDF tools market is enormous: ~150 million monthly visits to iLovePDF alone, similar volumes at Smallpdf and PDF24, several hundred million in aggregate. The headline price is zero. The actual cost per operation is not.
Bandwidth, accounted properly
A typical "compress this PDF" workflow looks like:
- Upload: 4–50 MB at residential upstream speeds (5–25 Mbps) = 1.3 to 80 seconds.
- Server queue + processing: 0.5 to 4 seconds.
- Download: 4–25 MB result (compression worked) at similar speeds = under a second to 40 seconds.
- User time staring at progress bar: 3 to 120 seconds.
On a mobile hotspot the upload alone can take 2+ minutes. The user's laptop, sitting idle the whole time, could have done the same compression in 2 to 6 seconds with pdf-lib in a Web Worker.
Retention and data exposure
The big operators advertise short retention windows — typically "2 hours" or "until the day ends." A retention window is not the same as an audit-log window. The actual data the operator keeps long-term:
- Source IP and approximate location.
- User-agent, browser fingerprint, cookie ID.
- Filename, original size, page count, sometimes title metadata.
- Processing parameters (compression level, redaction targets, page ranges).
- Output size and operation duration.
A breach of any of those exposes meaningful information about the user even after the file content is gone. A breach of the actual file store (before the 2-hour window elapses) exposes the file.
The price of the trust transfer
The least-quantified cost is the one that matters most for sensitive documents: you have transferred trust to a remote operator, irrevocably. You cannot un-upload. Your only recourse if the operator misbehaves — or is breached — is post-hoc.
For a printable concert ticket this is a non-issue. For a contract draft, a tax return, a medical record, a redacted court exhibit, or a board pack, the trust transfer dominates every other consideration.
The alternative architecture
Browser-based PDF processing eliminates each cost:
- Upload bandwidth: zero.
- Server retention: zero (no server saw the file).
- Trust transfer: zero (the operator can prove they never received the file by showing the network panel).
- Marginal infrastructure cost per operation: zero (the work happens on the user's device).
The architecture is so cleanly better that the only question is why the major operators have not switched. The answer is a mix of technical inertia (their stacks were built in 2010), monetization (a server-side funnel makes "Upgrade to Pro for unlimited" feel natural — easier to gate at upload time), and engineering conservatism around supporting older browsers.
Merge Everything builds on the alternative. InstantFileTools runs every operation client-side, supports 46+ tools today, and is free for the basic operations because there is no server cost to amortise.
If this resonates, try InstantFileTools — the privacy-first tools described in this article, available free in your browser.