Why this matters
Court filing systems (PACER, state e-filing systems) publish PDFs publicly — any metadata in your filing is visible to anyone who downloads it.
Grant portals (Grants.gov, foundation portals) often share submitted PDFs with reviewers — metadata can de-anonymize proposals.
Government FOIA responses are PDFs — agencies have accidentally released other filers' metadata when redacting was done improperly.
Public records repositories (libraries, archives) preserve PDFs indefinitely — metadata you leak today persists for decades.
What the scanner detects
- All info dictionary fields (Author, Creator, Producer, Title, timestamps)
- XMP XML metadata block
- Embedded JavaScript that could execute on the server
- File attachments and embedded files
- 50+ categories of PII in visible text (emails, SSNs, credit cards, etc.)
Ready to scan your PDF?
Drop your file into the scanner. Results in 5 seconds. Nothing leaves your browser.
Open the scannerHow it works
Click "Scan your PDF now" above. The scanner opens in your browser tab — no download, no install.
Drop in your PDF. The file is parsed entirely in your browser using JavaScript. No upload, no server, no logs.
Review your 0–100 risk score, the list of findings, and the AI-generated redaction recommendations. Then take action.
Frequently asked questions
How do I sanitize a PDF before uploading?
Drop your PDF into the scanner above. It identifies all metadata, JavaScript, attachments, and PII patterns. Then run it through PrivacyScanPDF's metadata remover (strips info dictionary + XMP) and redact tool (removes PII from visible text). The result is a sanitized PDF safe to upload.
What does it mean to sanitize a PDF?
Sanitizing means removing all non-visible data that could leak identifying or sensitive information: metadata fields (Author, Creator, timestamps), XMP XML blocks, embedded JavaScript, file attachments, annotations, and PII patterns in the visible text. The visible content stays; everything else is stripped.
Do I need to sanitize PDFs before uploading to court filing systems?
Yes, absolutely. Court filing systems (PACER, state e-filing) publish PDFs publicly. Author metadata has revealed the drafting attorney in supposedly neutral filings. Timestamps have been used to challenge execution dates. Always sanitize before e-filing.
Is browser-based sanitization safe for sensitive documents?
Yes — and it's the only safe option for documents containing PII or privileged content. Server-based sanitization tools upload the full PDF (including the sensitive content you're trying to strip) to their server. Browser-based tools like PrivacyScanPDF process locally — your document never leaves your device.
Related privacy scans
How to Delete the Electronic Footprint From a PDF
Every PDF carries an electronic footprint: who made it, what software they used, when, and sometimes where. This footprint persists across saves, copies, and email forwards. To delete it, you need to strip the PDF's info dictionary and XMP metadata block — not just the visible content. This tool does that locally in your browser.
Scrub Tracking Details Out of a PDF File (Free)
PDFs can carry various tracking details: embedded JavaScript that fires on file open, web beacons that ping a server when the PDF is viewed, identifying metadata in the info dictionary, and XMP identifiers that some document-tracking services use. This tool scans for all of them locally and shows you what's tracking you.
Remove Hidden Identifying Background Data From a PDF
PDFs have multiple layers of 'background' data that don't show on screen but can identify you: the XMP XML metadata block, embedded JavaScript, file attachments, annotations, and custom enterprise metadata. This tool scans all of them locally and shows you what's hiding in your PDF.
How to Unattach the Original Owner Name From a PDF
When you create a PDF, your editing software auto-attaches your name as the 'Author' in the file's metadata. This attachment persists through saves, copies, and forwards — the original owner stays attached. To unattach it, you need to strip the Author field (and ideally the full info dictionary) from the PDF's bytes. This tool does that locally.
Your PDF never leaves your device
Every operation runs as JavaScript in your browser tab. No upload endpoint exists. Verify it yourself in DevTools (F12 → Network).