October 3, 2026 · 8 min read

Free File Tools: What to Verify Before You Upload Anything

Padlock icons prove nothing. Here are the signals that do, the test that settles it in two minutes, and the same checklist turned on Skrubly itself.

Free file tools are a crowded corner of the internet, and almost everything that looks reassuring is decoration. Padlock icons. The word "secure". A confident banner promising files are deleted after an hour. All of it is text somebody typed. Here is a checklist built only out of things you can verify, in order of how much they tell you.

1. Find out whether the file is uploaded at all

First question, because it makes most of the others moot. If the file never leaves your device, retention policies and breach risk simply do not apply to it. Two ways to find out, neither needing any technical background.

• The offline dare. Load the page completely, then switch off your wi-fi or unplug the cable. Now use the tool. A result means the work happened on your device — a page with no network cannot ask a server for anything. A failure means your file was being shipped out.
• The network check. Open developer tools (F12, or right-click and Inspect), go to the Network tab, clear the list, process a file. Hunt for an outgoing request roughly the size of your file. A local tool produces nothing like it — just its own scripts and perhaps a model download. Try it once on a site you know uploads, so you learn the shape.

This is the strongest item on the list by miles, because it is a measurement, not a promise. Any site can claim anything. Not every site keeps working with the plug pulled.

2. Read how precisely the site describes itself

Precision is the tell. A site that says which tools are local and which are not is making a claim it has to stand behind. A site that just says private, secure and safe, with no mechanism anywhere, is writing copy.

3. Check who is behind it

• A named company, a jurisdiction, a way to reach a human? A policy means nothing if nobody is accountable for it.
• Is there a privacy policy, and does it match the homepage? Contradictions between the two are more revealing than either one.
• Does it say how the thing is paid for — ads, a paid tier, something else? "Free with no visible business model" deserves a moment's thought.
• Are you being asked to sign up? An account staples your files to an identity for no benefit on a one-off job.

4. Watch the behaviour, not the branding

• Does the download give you your file, or an installer, an extension, a .exe? Clearest bad sign there is. Leave.
• Popups, fake download buttons, tabs opening by themselves? Advertising is normal. Deception is not.
• Does it ask for permissions it has no use for — contacts, clipboard, notifications, camera, for a PDF tool?
• Does the result carry a watermark the page never mentioned, or hit a paywall that only appears once your file is uploaded?
• Ten near-identical sites, same layout, different names? That pattern usually means the product is the ad traffic.

5. Match the tool to the stakes

The sensible position is not "never upload anything". It is noticing which pile a file is in. For a meme, use whatever works. For a passport scan, a signed contract, a medical letter, a photo of a child, or anything your employer treats as confidential, hold out for a tool that never receives the file — or use desktop software you already have.

The checklist, turned on Skrubly

Publishing a checklist and dodging it would be poor form. So, point by point.

• Uploaded? No — for the metadata cleaner, file compressor, background remover, AI text detector and AI image checker. Those five run entirely in your browser tab. Never uploaded, never stored on any server, never visible to us. All five keep working with the network disconnected after the page loads. Go and check.
• The exception: the TikTok downloader. The link you paste goes to our server, which asks a third-party provider for a downloadable version, and the video is fetched server-side. A public URL travels; no file of yours does.
• Accountable? A named company, a jurisdiction and a contact address, in the privacy policy and terms.
• Paid for how? Advertising. No paid tier, no account, no sign-up, no watermark on results.
• Data collected? Not nothing, and we will not pretend otherwise. Like other websites, this one processes routine technical data — IP address, browser, pages visited — and uses cookies and aggregate analytics; the privacy policy has the detail. The narrow, checkable claim is about your files.
• Limits worth knowing: local processing runs on your device, so big videos are slow, and an old phone can run out of memory where a laptop would not.

We are not going to tell you this is the safest tool on the internet, or make claims about anyone else's. Structurally, an upload-based tool has to put your file on a computer you do not control, for a period its policy defines — which may be entirely fine. Read the policy of whatever you use. Then pull the plug and watch, because that is the part nobody can write their way around.