ImagePDF.Tools

Scan a PDF for Hidden Personal Data

Processing securely on your device, no data sent to any server
PDF

or drop files here

Find out what a PDF reveals beyond the words on its pages, from author names to photo locations, then strip the parts you choose. The audit itself happens on your machine, so the file you are worried about stays with you.

How it works

Scan it, read it, clean it.

Add the PDF

The audit starts the moment the file opens. Properties, attachments, scripts, photos and the text of each page are all inspected.

Read the report

Each finding says what was found, gives an example, rates the risk and tells you whether cleaning will deal with it.

Clean and save

Choose what to strip, and the file is rewritten from scratch without it. Save the clean copy and send that one instead of the original.

Use cases

A PDF says more than its pages.

Hidden data rarely causes trouble until the wrong person opens the file. A quick audit before sending is worth it in moments like these.

Sending a CV or cover letter

A template borrowed from an old job can still list your former employer as the author, or a recruiter’s name in the editing history.

Tenders and price quotes

An incremental save can keep last week’s lower price inside the file you submit. Rebuilding the PDF leaves only the figures on the page.

Property and listing brochures

Phone photos dropped into a brochure often carry the GPS position of the house and the time they were taken. The scan reports both.

Documents from strangers

Before opening an unexpected invoice in a full reader, check it for scripts, programs it tries to launch, or buttons that post data to a web address.

Reports passed to a regulator or reporter

Reviewer names on comments and the account name in the properties can identify who prepared a document, even when the text is anonymous.

Templates you publish online

A form or guide posted on your website can carry attached source files, page thumbnails of an older draft, and private data left by the design app.

What can hide inside a PDF

The pages you see are only one part of a PDF. Around them sits a catalogue of objects that viewers rarely show: a properties record, an XML editing log, a folder for attached files, a slot for scripts, per-page thumbnails, and the raw bytes of every embedded photo with its camera data intact. Below is every place this scanner checks, how serious a finding there usually is, and what the Clean button does about it.

Cleaning always rewrites the file from the objects still in use, which is how earlier saved versions disappear even if you switch every other option off. Working with loose photos rather than a PDF? Remove Metadata strips EXIF and GPS from JPEG, PNG and WebP images directly.

WhereWhat it can revealRiskAfter cleaning
Document propertiesAuthor, title, subject, keywords, the creating app and the PDF producerMediumRemoved
XMP editing historyA log of saves, with the software used for each oneMediumRemoved
Attached filesSpreadsheets, drafts or images riding along without appearing on any pageHighRemoved
Earlier saved versionsPrevious states of the document, text you deleted includedHighDropped by the rebuild
JavaScript and actionsScripts on open, close or print; links that launch programs; buttons that submit dataHighRemoved
Photo EXIF in JPEGsGPS coordinates, camera make and model, the time a photo was takenHigh with GPSRemoved, no recompression
Comment authorsThe name and date attached to every note and highlightMediumNames removed, or all comments
Page thumbnailsSmall stored previews that may show an older version of a pageLowRemoved
App private dataExtra data saved by editing software (PieceInfo)LowRemoved
Hidden layersContent switched off by default but still in the fileMediumReported only
Filled form fieldsTyped answers that can be read out even where not shownMediumReported only
Personal data in textEmails, phone, card, IBAN, SSN, Aadhaar and PAN numbers on the pagesHigh or MediumReported only
Web linksDestinations that may include tracking parametersLowKept and listed

Scanned pages have no text layer, so personal data inside them cannot be detected; run OCR PDF first if the document is a scan. For printed details that must go, Auto-Redact PDF picks up where cleaning stops.

Common questions

Questions answered.

What exactly does the scan look at?
It reads the document properties and XMP packet, the list of attached files, every script and automatic action, comment authors, filled form fields, hidden layers, stored thumbnails, application private data, the number of saved versions, and the EXIF block of each embedded JPEG photo. It also reads the text of every page and checks it for emails, phone numbers, card numbers and other personal data. Each finding is ranked High, Medium or Low.
How is this different from Remove Metadata or Edit PDF Metadata?
Remove Metadata strips EXIF and GPS from standalone photos such as JPEG, PNG and WebP files. Edit PDF Metadata lets you rewrite a PDF's title, author and dates. This scanner is a full audit of a PDF: properties are only one of more than a dozen places it checks.
What does "earlier versions inside the file" mean?
Many editors save changes by appending them to the end of the PDF instead of rewriting it, so the previous version, deleted text included, is still sitting in the file. The scan counts these end-of-file sections. Files saved for fast web view are built with two sections from the start, so a single extra version on such a file may be harmless; cleaning removes them either way.
Why does cleaning leave the personal data in the text?
A phone number printed on a page is part of what the reader is meant to see, so removing it means changing the page itself. The scanner shows you a masked sample of each match and points you to Auto-Redact PDF, which blacks them out properly.
What are my choices for comments?
Remove names keeps every note and highlight but deletes who wrote it and when. Remove all deletes comments, highlights, stamps and their pop-ups entirely. Keep as is leaves them untouched, which suits a review copy going back to the same team.
Does stripping photo details lower image quality?
No. The EXIF, XMP, IPTC and comment segments are cut out of each JPEG without decoding or re-compressing the picture, and the colour profile segments are kept so colours look the same. Only images stored as plain JPEG are changed; other image types are left exactly as they were.
Are hidden layers and form answers removed?
They are reported, not removed, because deleting them could change how the document works or looks. To get rid of a switched-off layer, run Flatten PDF with Image-only so only visible content survives. Filled form answers can be fixed into the page with the same tool, or cleared field by field in Fill PDF Form before sharing.
Will the links in my document still work?
Yes. Ordinary web links are kept and listed so you can check them for tracking parameters. Only links and buttons that run JavaScript, launch a program, import data or send form contents to an address are disarmed when scripts are removed.
Is the PDF checked on a server?
No. The structure is read by pdf-lib in a Web Worker, photo details are parsed in the same worker, and the page text is extracted with pdf.js, all on your computer. The clean copy is assembled there too, then offered for you to save.