1 · Watch the network panel

  1. Open any Bindery tool with a harmless sample PDF — the built-in samples work, or use the dashboard’s try the sample files link.
  2. Open your browser’s developer tools (F12) and select the Network panel.
  3. Run the job — compress, merge, redact, anything.
  4. Inspect the requests: you will see application assets load (scripts, fonts, icons), and nothing containing your document’s bytes. There is no upload request because there is no upload endpoint.

2 · Pull the plug

Load Bindery once, then disconnect from the network entirely — airplane mode, Wi-Fi off, cable out. Keep working. Merging, splitting, compressing, OCR and the other tools continue to function, because the processing engine is already on your device. Translate PDF is the exception: your own AI key needs the network, and Chrome needs it once per language pair to download a language pack. A tool that uploaded your files for processing could not do this.

The installable app makes the same point permanently: install Bindery from your browser menu and it runs as an offline-capable application.

3 · Read the code that runs

Bindery’s own scripts are served unminified, so the code that handles your file is readable where it runs: open the developer tools, choose Sources, and read ops.js, compress.js and the vendored pdf-lib build. There is no server-side step to take on trust. The About page documents how product behavior is tested, and the offline PDF tools guide explains what browser-local processing can and cannot do.

What this proves — and what it doesn’t

These checks prove document bytes stay on the device during processing. To be complete about the rest: ordinary website telemetry (cookieless page analytics), optional account data (identity, subscription state, a daily job count, saved recipes and presets) and payment processing through Stripe all exist and are described in the privacy policy. None of them ever contain your documents. One opt-in exception: with your own AI key, Ask this PDF and Translate PDF send text to the provider you choose, never to Bindery.