Skip to content
FilePolish

Search

Popular tools

  • Merge PDFPDF

    Combine several PDFs into one document, in the order you choose.

  • Edit PDFPDF

    Change text, add images and shapes, and export a clean PDF.

  • Compress imageImage

    Reduce file size for forms and websites while keeping photos usable.

  • Word countFiles and data

    Count words, characters, sentences and paragraphs in text files or pasted text.

  • CSV to JSONFiles and data

    Convert CSV rows into clean JSON with sensible type detection.

  • QR codeFiles and data

    Create a QR code for a link, text or contact details and download it as an image.

  • Password generatorFiles and data

    Generate strong passwords with the length and character sets you choose.

  • Email writerAI · Writing

    Draft a formal or friendly email in the tone you choose.

Use ↑ ↓ to move and Enter to open.See all tools

Security

Security and privacy

By default, FilePolish does not upload your files. This page explains the exceptions and the parts you should not take on trust.

01

Where your files go

Local tools read the file into browser memory, process it in a Web Worker and produce a download. Our server never receives the file.

02

What leaves your device

Two things leave your device. The AI tools send the text you provide after a consent step. The contact form sends your name, email and message to our inbox through Resend. We do not log prompts, outputs or contact messages; the AI and email providers apply their own policies.

03

Content Security Policy

A strict CSP allows our own assets plus the Support Kori donation widget, which loads a script and a frame from supportkori.com only when you choose Support Me. Fonts, PDF cmaps and workers stay self-hosted, so rendering does not depend on a CDN. The widget never receives your files.

04

Accounts, cookies and storage

There are no accounts and FilePolish sets no tracking or advertising cookies. The Support Kori donation iframe may set its own cookies after you open it; see the cookies page. Only your theme choice, AI acknowledgement and small UI state are kept in local storage in your browser.

05

Limits and reality

Browser extensions, old browsers and very large files can cause problems. We do not hide limits: large files trigger a warning, and failures produce a clear message instead of a silent freeze.

06

Server logs

Our host, the AI route and Resend may keep standard security or delivery logs: time, IP address, request type and status. File contents, AI prompts and contact messages are not logged by FilePolish.

07

Reporting a vulnerability

If you find a security problem, contact us with the details. Do not attach files or personal data. We will respond as quickly as we can; there is no bug bounty programme yet.