October 3, 2026 · 8 min read

Your CV Is Not a Holiday Snap. Stop Treating It Like One.

A CV carries your address and your history. A contract carries someone else's. The two-minute routine to run before either one leaves your computer.

Most of what you throw at a free online tool is worthless if it leaks. A meme, a photo of a plant, a clip for the group chat. Then there is the other pile: your CV, a signed contract, a tenancy agreement, a bank statement, a letter from a hospital. Same drag-and-drop, completely different consequences.

Why documents are a different animal

• They concentrate. A CV holds your whole employment history, phone number, address and often your date of birth in one file. No photo comes close.
• They involve other people. A contract names a counterparty. A medical letter may name family. You are deciding for them too.
• They may not be yours to share. Employment contracts, client work and anything under an NDA are often contractually barred from going to a third party — which is what an upload is.
• They may be legally protected. Health data and other special categories carry obligations under GDPR and its equivalents that a beach photo does not.
• They have a hidden layer of their own. Word, PowerPoint and PDF files store the author name, the organisation, editing history, and sometimes the full revision trail and comments.

Document metadata is worse than photo metadata

A photo tells on your location. A document tells on your process. The author field often holds a real full name or a company account. The company field names your employer. Tracked changes and comments can preserve the paragraph someone told you to delete, and who told you.

The embarrassing version: a CV whose author field is still the name of the friend whose template you borrowed. The expensive version: a tender document whose revision history shows the number you were originally going to quote.

Count the copies you are creating

Be realistic about the ordinary route first. A CV sent to a job ad reaches a recruiter, an applicant tracking system, and often several of that recruiter's clients. A contract emailed as an attachment lives in two mailboxes and two providers' backups indefinitely. None of that is malicious. It is just how email and hiring work.

So the question is not "is this perfectly safe". It is "how many copies am I making, and do I know where each one sits?" An upload-based tool adds one you have zero visibility over. That is also the easiest one to delete from the list.

The two-minute routine

• Work from a copy, never the original. Name it for the job — "cv-2026-acme.pdf" — so you can tell later what went where.
• Redact first. Blank what the recipient does not need: your full address on a CV, the account number on a statement, unrelated clauses in a contract. Edit the document; do not draw a black box over text that is still selectable underneath.
• Strip the metadata. Author, company, revision history, comments, timestamps.
• Flatten it if it must not be edited. Exporting to PDF, or rasterising, stops the recipient reopening your tracked changes.
• Compress last, and only if a size limit forces you to. Then check the text is still selectable if they need to search it.
• Send through the channel they asked for, and note what you sent and when.

Six dull steps. They are the difference between a document that says what you meant and one that also says five things you never thought about.

Do the work where the file never moves

For documents, use tools that never receive the file. Skrubly's metadata cleaner and file compressor handle PDF, Word and PowerPoint entirely inside your browser tab: read from your disk, rewritten there, saved back to your disk. Never uploaded. Never stored on a server. Never visible to us. No account, no sign-up, no watermark.

Now verify it instead of believing it. Load the page, disconnect from the internet, run your file through. It completes, because there is no connection left to transmit over. Or open developer tools, watch the Network tab, and look for an outgoing request carrying your document. There isn't one.

Same honesty as everywhere else here: that covers the local tools. The TikTok downloader sends the link you paste to our server and a third-party provider fetches the video server-side — your files never travel, a public URL does. And the site is ad-supported and processes ordinary technical data such as IP address and pages visited, per the privacy policy. Any tool promising to collect absolutely nothing is worth distrusting on sight.

When a local tool is the wrong tool

• Signatures with legal weight. Use a real e-signature service; the audit trail is the product.
• Anything your employer requires to stay inside their systems. The approved internal tool wins every time.
• Documents several people need to edit at once. That is collaboration software, not a file utility.
• Huge videos. Local work runs on your own device, so a long clip takes real minutes on a laptop and far longer on an old phone.
• OCR or bulk conversion of hundreds of files. Possible in a tab, slow enough that you will want desktop software.