Verify images stay on this device
LocalImgPdf converts JPG, PNG, and WebP to PDF in the browser. This page is the check you can run yourself: which network calls are normal, and which calls would mean the images left the tab. The tool is on the home page. The short policy is the privacy policy. The copyright and rights rules are the terms. Publisher context is on about.
What you are proving
You are proving that image-to-PDF does not upload the photos. You are not proving that nothing on your computer can see the bytes. A browser extension, malware, or a recorder you installed can still read a tab. This site does not receive the file, and it does not claim to block other software on the device. Files never leave this device through this page.
If Network shows a POST or PUT of your images, stop using that session and write to contact@localimgpdf.pages.dev with the page URL and what you saw — without attaching the photos. That would not match how this tool is built.
Steps in DevTools
- Open the converter. Use a small JPG or PNG you are allowed to test with, not a passport or card slip, the first time you learn the panel.
- Open DevTools → Network. In Chrome that panel is documented as the Network panel. In Firefox it is the Network Monitor. Enable “Preserve log” so a reload does not wipe the list.
- Reload the page once and let the first requests finish. You should see same-origin GETs for the document,
/assets/styles.css,/assets/tool.js,/assets/vendor/pdf-lib.min.js, and the favicon. - Drop one or more images. Wait until the list appears. Sort or scan the new rows. There should be no request whose body is those files, and no POST or PUT of the images to this host or any other host.
- Convert and download. Downloads use
blob:URLs created in the tab. The browser is not fetching those bytes from our server.
Expected requests
- Page assets. HTML, CSS,
tool.js,pdf-lib.min.js, and the icon — all GET, all from this site, when the page loads. - pdf-lib. Same-origin GET of
/assets/vendor/pdf-lib.min.js. That file is the MIT-licensed library that embeds images and builds the PDF in the tab. It is not your photos. Open the response: it is JavaScript. - Analytics beacon, maybe. The privacy policy describes Cloudflare Web Analytics. If that product is enabled for the zone, a request to
cloudflareinsights.comcan show up. It is a page-view beacon. It is not an upload of the images you dropped. The HTML we ship does not include an advertising script.
Requests that should not appear
- A POST, PUT, or PATCH that carries the JPG, PNG, or WebP bytes.
- A call to a third-party convert, OCR, or “AI PDF” API after you drop the file.
- A fetch of a remote image URL. The tool has no address field and does not download pictures from the web.
- A script load from an ad host. Response headers for this site set a Content-Security-Policy with
script-src 'self'and do not list an ad network.
Why the file can stay in the tab
The drop area is a file input. The File API lets the page read a file the user chose. It does not give the page a path it can upload on its own later. pdf-lib embeds the image into a new PDF document in memory. The download button points at an object URL from URL.createObjectURL. When you close the tab, that buffer goes with it. We have no project library to reopen.
Soft limits refuse images over about 12 MiB and batches over about 48 MiB or about 40 images. HEIC and HEIF are rejected. Those errors are local. They are not an upload, and they are not a cloud conversion fallback.
Publisher, contact, and policy pages
These pages stay on the existing URLs. They are how you learn who publishes the tool and how to reach us:
- About — who publishes the pages.dev experiment and what the tool is for.
- Contact — a working mailbox for wording and bugs, with clear “do not send sensitive images.”
- Privacy — no image upload, hosting logs, optional Web Analytics, children note.
- Terms — your images, acceptable use, honest limits.
- This trust page — a verifiable Network check for the convert step.
This experiment does not run advertising scripts today. If that ever changes, privacy and about would need an honest update first.
Where to go next
- Convert images to PDF
- Phone photos to one PDF for email
- Receipt photos into one expense PDF
- Combine UI screenshots into one PDF
- Why local image to PDF skips upload
- About · Privacy · Terms · Contact
Questions about this wording, email contact@localimgpdf.pages.dev. Do not attach the images. We cannot accept the file, and we do not want a passport or card slip in a mailbox.
Sources
- Chrome DevTools — Network panel: developer.chrome.com/docs/devtools/network
- Firefox — Network Monitor: firefox-source-docs.mozilla.org/…/network_monitor
- MDN — Using files from web applications: developer.mozilla.org/…/Using_files_from_web_applications
- MDN —
URL.createObjectURL: developer.mozilla.org/…/createObjectURL_static - MDN —
Blob: developer.mozilla.org/…/Blob - pdf-lib (MIT). The script you see in Network is served from this site: pdf-lib.js.org
FAQ
How do I prove this image to PDF tool does not upload my file?
Open DevTools → Network, drop a local JPG or PNG, and convert. You should see same-origin page assets including pdf-lib. You should not see a POST or PUT of the images. Downloads use a blob URL created in the tab.
Is the pdf-lib script load an upload of my photos?
No. It is a GET of /assets/vendor/pdf-lib.min.js from this site. The response is the library script. Your images are not in that request or that file. PDF assembly then runs in the tab.
What is a blob download?
After convert, the download link points at a blob: URL made with URL.createObjectURL on a Blob built in the page. The browser saves those bytes from memory. It does not download them from our server.
Which network requests are a problem?
A problem is any request that sends the image files, calls a third-party convert API, or fetches a remote image address. Static assets, pdf-lib, and an optional Cloudflare Web Analytics beacon are not the image upload.
Does this check cover WebP as well as JPG and PNG?
Yes. JPG, PNG, and WebP all stay in the tab for embed and PDF build. HEIC is rejected locally. Use the same Network panel either way. The no-upload guide covers what the host still sees.
Can the page fetch an image from a URL I paste?
No. There is no URL field and no remote image downloader. You can only choose a file already on the device, and the terms require that you have the rights to process it.