Merge confidential documents

A practical checklist for handling sensitive files when you merge them.

Drag & drop PDF files here

or

Free: up to 5 files, 20MB total

The files do not upload

This tool merges PDFs in your browser tab. The files are not sent to a server; they stay on your device while you work. You can verify this yourself: open the browser's developer tools (usually F12), go to the Network tab, and watch while you merge. No request carries the contents of your PDFs. The page itself still makes small requests of its own, for example to load its scripts and check Pro status; none of them carries your files. If you were online when you first loaded this page but then switched your network off, the merge still works in the offline tab. More detail at merge PDF without uploading.

But copies still exist on your device

Not uploading does not mean copies disappear. When you merge, you create merged.pdf and download it to your downloads folder. While the tab is open, the browser holds your files and the merged result in memory. If you use a shared or work computer, anyone with access to that computer can open the downloads folder and see the file. Some browser extensions have permission to read the pages you open, so review what you have installed.

A checklist for sensitive files

  1. Use a device you control. Merge on a personal computer or phone, not a shared work machine or a borrowed device.
  2. Check the browser's Network tab (press F12 to open developer tools) while merging to confirm no data goes to a server.
  3. Delete the merged file when you are done. Delete it from your downloads folder, then empty the recycle bin or trash if you want it gone from there too.
  4. Close the browser tab after you download, which releases the files from the browser's memory.
  5. Review your extensions. Remove any you do not recognise or no longer need before you open sensitive files.

What this tool cannot do

It does not encrypt the merged file, add a password, or redact sensitive information like names or account numbers. It does not delete any copies for you or prevent browser extensions from reading the pages. It does not track when you delete files or clean up your downloads. If you need a password on the merged file, you will have to add it with a different tool.

Where this checklist stops

This page covers only the merging step, on your device. If the merged file is emailed or stored on a server afterwards, those copies sit outside what this page can control.

More about merging PDFs

Free, with an optional Pro unlock

Pro is Hexloom Pro, $29 a year or $4 a month, one subscription for every Hexloom tool. It removes the 5 file and 20MB limits. There is no account: Pro unlocks the browser you subscribe in, and the confirmation page has a link to restore it elsewhere.

Get a note when the next free tool ships

One short email when a new Hexloom tool ships, at most once a week. You confirm by email first and can unsubscribe in one click.