No uploads
Parsing and content-stream rewriting both run in your browser, using pdfjs-dist and pdf-lib. Open devtools, switch to the Network tab, redact a file: nothing fires. Bytes never leave this device.
Permanent redaction. Not a black rectangle.
Redact PDFs without
Redact PDFs without
losing the rest.
Most online redactors slap a black box on top of the text. The text is still in the file, ready to be copy-pasted out. We actually remove the targeted content from the PDF, then paint the box on for visual confirmation. Everything outside the redaction stays as native, selectable text. Nothing is uploaded.
Drop a PDF here_
or click below. Stays on this device, period.
PDF · multi-page · up to 200 MB in browser memory
Zero uploads. The file is opened, parsed, and redacted entirely in your browser. Open devtools and watch the network tab; you'll see nothing leave.
verify it yourself
Privacy as an instrument, not a claim.
Your PDFs never leave the tab. Every claim below is something you can confirm in your own browser before you trust this tool with anything sensitive.
Real redaction, not a sticker
Most browser redactors paint a black box on top of the text and call it done. The text is still in the file, ready to be copy-pasted out. We rewrite the page content stream to actually remove the targeted glyphs, then paint the box on for visual confirmation.
No tracking
No analytics, no cookies, no fingerprinting. Custom regex patterns persist in localStorage on this device only. The PDF you opened lives in JS memory until you close the tab.
run it offline
Don't trust the page. Take it home.
A single HTML file you can drop on a USB stick. A static asset you can self-host on your intranet. The full source under MIT. Pick your level of paranoia.
Standalone HTML
index.html plus a vendor/ folder with pdfjs and pdf-lib bundled in. Drop the pair on a thumb drive, double-click, redact PDFs with no network at all. Content-Security-Policy locks the page to its own origin so it can't phone home even if a future change tried.
Run it on your network
Serve index.html from your NAS, SharePoint, internal wiki, or any static host. Anyone who can reach the page can redact PDFs without bytes leaving your network.
View source
Every line of code, MIT-licensed, on GitHub. Audit the redaction logic, fork the regex pack, extend it with your own patterns. Issues and PRs welcome.
github.com/xjmani/pdf-redactor →Custom redaction patterns
Paste an example of the text you want to redact. Words BEFORE a separator (: — - # =) stay literal (the label). Tokens AFTER a separator become variable. Dashes auto-expand to also match em-dash, en-dash, and NUL (some PDFs render dashes as NUL bytes). Edit the regex below if needed.
Saved on this device only. Auto-detect will run these alongside the built-in patterns.