Are my PDF files uploaded to Velprio’s servers?

No. Every tool runs in your browser using JavaScript on your own device. There is no upload step in the code, and no server that receives files. You can verify this by disconnecting from the internet after the page loads — the tools continue to work.

Can Velprio see the contents of my documents?

No. Your file is read into your browser’s memory, processed there, and the result is saved back to your device. The file’s contents, its name and its page count never reach us, because they are never sent anywhere.

Are my files stored or deleted after processing?

Neither, because they are never stored anywhere but your own device’s memory. There is no copy on a server to delete. When you remove a file or close the tab, the browser releases that memory.

Does Velprio track me or show advertising?

No advertising, and no tracking. We use Cloudflare Web Analytics to count page visits, which is cookieless and does not follow you across other sites. There is no account to create, so there is nothing for us to associate your activity with.

Security

Velprio’s tools run entirely inside your browser. Your files are never uploaded, never stored on a server, and never seen by us — not because we promise to delete them, but because they are never sent in the first place.

That is a strong claim, so this page explains exactly how it works, shows you two ways to check it for yourself, and is honest about where our protection ends.

Last reviewed 15 October 2026

How Velprio works

Most online PDF tools send your document to a server, process it there, and send a result back. That design asks you to trust a stranger’s servers, their retention policy, their staff and their security practice — usually all at once, usually without reading anything, and usually for a task that takes four seconds.

Velprio does not work that way. When you choose a file, your browser opens it locally — the same way it would open an image you drag onto a tab. The merging, splitting, rotating or converting is done by code running on your own device, and the finished file is written straight back to you.

There is no upload step in our code. There is no server that accepts a file. Velprio is published as a set of static pages, so the thing a file would have to be sent to does not exist.

Don’t take our word for it

Any website can claim it respects your privacy. Very few can be checked in under a minute. These two tests need no technical knowledge and no trust in us at all.

Turn off your internet connection

Open any Velprio tool, wait for it to load, then switch on aeroplane mode or unplug your network cable. Now pick a PDF and merge, split or convert it. Everything still works, and your finished file still downloads.

A tool that uploaded your file could not possibly do that. This is the whole claim, demonstrated in about thirty seconds.

Watch the network yourself

If you prefer to see it directly, press F12 to open your browser’s developer tools and choose the Network tab. Run any operation on a file. You will see the page’s own scripts and images load, and nothing else. No request carries your document, its name, or anything derived from it.

What does leave your device

Being precise matters more here than sounding good. Your files do not leave your device, but visiting any website involves some ordinary traffic.

The pages and scripts themselves. Your browser requests them from our host, which means our host sees your IP address and browser type, as it would for any website you visit.
Page visit counts. We use Cloudflare Web Analytics, which is cookieless, does not fingerprint your device and does not track you across other websites. It records the page, not the person, and never anything about a file you opened.
No advertising. No advertising or tracking scripts run on this site today. We may introduce advertising later to cover the cost of running the tools; if we do, it will be described here first, and it will never receive anything about your files.

What is never transmitted, under any circumstance: the contents of your file, its name, its size, its page count, or any image rendered from it.

What stays in your browser

Your files live in memory only. They are held in your browser’s working memory while a tool is open, and released when you remove a file or close the tab. Nothing is written to a database, a cache or a server disk, and there is no copy anywhere for us to delete later.

One small preference. The page preview remembers whether you last chose to fit a page to the window or to its width. That setting is stored in your own browser and never sent anywhere.

No account, nothing to breach. The tools need no sign-up, no email address and no password. We hold no user records, so there is no account database to be stolen.

The code that runs on your device

Velprio is built on two well-established open-source libraries: pdf.js, the PDF engine developed by Mozilla and used inside Firefox, which reads and displays your documents; and pdf-lib, which writes the new file. Both have been examined by far more people than any code we could write ourselves.

Those libraries are served from velprio.com itself rather than from a third-party content network. That is deliberate: no outside party receives a request at the moment you open a document, and nobody can change the code running on your device without changing our site.

The site is delivered over HTTPS, so the pages and scripts your browser downloads cannot be read or tampered with in transit.

Where our protection ends

Processing files on your own device removes an entire category of risk. It does not remove every risk, and a security page that claimed otherwise would not be worth reading.

Your device is the boundary

Because your file is handled on your computer, the security of your computer is what protects it. Malware on your machine, or a browser extension with permission to read pages, can see anything you open — on this site or any other.
On a shared or public computer, a downloaded file stays in the downloads folder until someone removes it. Close the tab and clear your downloads when you are finished.
Always check the address bar says velprio.com. Sites that imitate popular tools are common, and one that genuinely did upload your files would look much like this one.

We also make no claim that our tools are free of bugs. They are offered as they are, under our Terms of Use. Keep your original file until you have checked that the result is what you expected.

Password-protected files

Many business documents — bank statements and invoices especially — carry permission restrictions that limit printing or editing without requiring a password to open them. Velprio opens these normally, exactly as any PDF reader does.

A file that needs a password simply to be opened cannot be processed, and the tool will tell you so. If you remove the password in your own PDF reader first, the resulting file works here — and because nothing is transmitted, no password you type anywhere else ever reaches us.

Reporting a security problem

If you believe you have found a vulnerability in Velprio, we want to hear about it, and we will treat your report seriously.

[email protected]

Please include what you found, the steps to reproduce it, and the browser and version you used. We aim to acknowledge every report within three working days.

We ask only that you give us a reasonable opportunity to fix an issue before describing it publicly, and that you do not access or alter data belonging to anyone else while investigating. We will not pursue legal action against anyone who reports a problem in good faith under those terms.

See also our Privacy Policy for how the site itself handles data, our Terms of Use, and more about Velprio. Questions about anything on this page are welcome via our contact page.