Short answer: PDF24 is a legitimate, long-running German service — Geek Software GmbH has been building it since 2006 — with GDPR compliance, EU-based servers, and one of the shorter file-deletion windows in the industry at around one hour. For everyday documents, that’s a solid setup. PDF24 also does something most competitors don’t: it sells a genuinely local desktop app, PDF24 Creator, that processes files with zero upload. The catch is that Creator only exists for Windows. If you’re on a Mac, Linux, ChromeOS, or your phone, you’re pushed back to the same upload-based web tool as everyone else.
Here’s what happens to a file on PDF24’s web tools, what its privacy claims actually cover, and where a browser-based tool removes the upload step for every device — not just Windows.
What happens when you upload a file to PDF24’s web tools
The standard cloud sequence, same as most PDF services:
- Your file is uploaded over an encrypted connection to PDF24’s servers.
- It’s processed there — merged, compressed, converted, whatever the tool does.
- You download the result.
- The uploaded file is deleted from PDF24’s servers.
Here PDF24 does better than most: files are automatically wiped within one hour of processing, and — per their own FAQ — you can manually trigger deletion immediately after you’re done, rather than waiting out the window. That’s a shorter, more user-controllable retention period than several bigger-name competitors.
PDF24’s actual security standing
- German company (Geek Software GmbH, based in Berlin), operating since 2006 under EU jurisdiction
- Processing servers located within the EU, which keeps things inside GDPR’s scope
- GDPR and CCPA compliance stated in their privacy policy
- One-hour automatic file deletion, with an option to delete manually and immediately
- No public record of a data breach
What’s missing compared to Smallpdf or iLovePDF: PDF24 doesn’t publicly list an ISO/IEC 27001 certification or a formal SOC 2 report. For a small, ad-supported company that’s been running the same free model for close to two decades without incident, that’s not necessarily a red flag — but it does mean less third-party-audited documentation to point to if you’re doing a formal vendor review.
The desktop app — a real answer, with a real gap
PDF24 Creator is worth calling out specifically because it’s an honest acknowledgment that the web version isn’t the private option. Creator runs the same toolset entirely on your own computer, with no internet connection needed once installed and no files ever uploaded anywhere.
The gap: Creator is Windows-only. There’s no version for macOS, Linux, ChromeOS, iOS, or Android. If you’re on any of those — which covers a huge share of people filling out exam forms from a phone — the "genuinely private" option simply isn’t available to you, and you’re routed straight back to the same upload-and-wait-an-hour web tool.
Where the upload itself is the problem
Even at one hour, even with manual deletion available, the file still made a trip off your device. For certain categories of documents, that trip is the actual risk.
Photos and signatures for government exam forms. UPSC, SSC, RRB, PAN, NEET, TNPSC applications all require photos and signatures compressed to specific KB targets. Since these carry your face and signature, using local resizers like the UPSC Image Resizer, SSC Photo Resizer, or our general Signature Resizer ensures they never leave your device. These are images of your face and signature, tied to an identity-verification process — and a huge share of applicants are doing this from a phone, exactly the device PDF24 Creator doesn’t support.
Aadhaar and other ID documents. An e-Aadhaar PDF’s password protection exists to control access to it. Uploading it anywhere — even to a server that deletes it an hour later — adds risk. Using our local Aadhaar PDF Compressor skips the server step entirely.
Contracts, medical records, and financial statements. PDF24 doesn’t publish a Business Associate Agreement or claim HIPAA compliance, and its compliance documentation is thinner than the larger, ISO-certified competitors — worth knowing if you’re evaluating it for regulated data specifically.
The alternative: browser tools that work locally on any device
This is the actual gap ZapToolHub closes — including the mobile and non-Windows gap PDF24 Creator leaves open. Every tool on the site — image compression, resize, PDF compression, and Aadhaar-specific tools — runs entirely inside your browser using WebAssembly. There’s no separate desktop download, no OS restriction, and no upload step to begin with, whether you’re on a Windows laptop, a Mac, or the Android phone most exam applicants are actually using.
You can verify this yourself: load any tool, let it finish loading, then switch off your WiFi. It keeps working, on any device, because nothing was ever sent anywhere. Try that on PDF24’s web tools — on any platform other than Windows-with-Creator-installed — and it stops the moment your connection drops.
The honest trade-off: a low-memory phone will feel a very large file more than a desktop would, since your device is doing the processing. For the everyday case this site is built for — an SSC photo down to 20KB, a UPSC signature resize, an Aadhaar PDF under a size cap — that’s rarely a meaningful limitation.
When PDF24’s model is genuinely a fine choice
If you’re on Windows and comfortable installing an application, PDF24 Creator is a legitimately private, full-featured, permanently free option — no complaints there. And for non-sensitive documents on other platforms, the web tool’s one-hour window with manual-delete option is one of the tighter retention policies among cloud PDF services.
A simple rule of thumb
If a file has your photo, signature, ID number, or anything you wouldn’t want on a server for even an hour, use a tool that processes it locally by default, on whatever device you actually have — not one that requires installing separate software on a specific operating system. That removes the guesswork of judging, file by file, whether it’s sensitive enough to worry about, and it doesn’t leave phone and Mac users with a worse option than Windows users.
Frequently asked questions
How long does PDF24 keep my files? Around one hour for the web tools, and you can trigger immediate deletion manually if you don’t want to wait. PDF24 Creator, the desktop app, doesn’t upload files at all.
Is PDF24 Creator available for Mac or mobile? No — PDF24 Creator is Windows-only. Mac, Linux, ChromeOS, iOS, and Android users are limited to the web tools, which upload files to PDF24’s servers like any cloud PDF service.
Is PDF24 ISO 27001 certified? There’s no publicly listed ISO/IEC 27001 certification or SOC 2 report for PDF24, unlike some larger competitors. Their security practices (encryption, short retention) are solid, but the formal third-party audit documentation is thinner.
Is it safe to compress an Aadhaar PDF or exam photo on PDF24’s web tools? The one-hour deletion window is genuinely short, but the file still has to be uploaded to process it. A browser-based tool like our Aadhaar PDF Compressor that compresses the file locally skips that step entirely — especially relevant if you’re on a phone, where PDF24’s local-only option isn’t even available.
What’s the safest way to compress a photo or signature for a government exam application, especially from a phone? Use a tool that processes the file directly in your browser regardless of device or operating system — such as our UPSC Resizer, SSC Photo Resizer, or general Signature Resizer — so that the image never leaves your phone or computer, without needing to install anything.