Quokka

Privacy

There's no server to send your file to, so it never gets sent anywhere.

It opens in your tab

WebAssembly reads your PDF inside this browser tab. Nothing is uploaded, nothing is stored, nothing is sent. Close the tab and it's gone.

It works offline

You're served static HTML, CSS, JavaScript and the MuPDF module. Once those have loaded you can disconnect, and the editor carries on working.

The output is honest

Editing a signed PDF breaks its signature, so Quokka looks for signature fields and warns you first. Files you save also record that they were modified, in the PDF's own metadata.

Analytics

None right now. If that changes it'll be counts of page visits and nothing else, and this page will say so. Either way the documents you open can't reach a server, because they never leave your machine.

What does leave your machine

Only the request for this page. It's fetched from a static host like any other website, so that host knows someone loaded the page. It doesn't see what you do next, and it never sees your file.