{
 "title": "Online PDF tools upload and tracking test",
 "tested": "2026-09-22",
 "location": "Canada (Toronto)",
 "browser": "Chromium, automated with Playwright",
 "fileBytes": 1207439,
 "method": "One visit per site in a fresh browser profile. Load: every request and cookie in the 15 seconds after opening, with no interaction. Upload: a test PDF carrying a random marker was given to the file picker; a script inside the page inspected every XHR, fetch, beacon and WebSocket body before it left and recorded an upload only when the body was the test file, a slice of it, or bytes carrying its marker. Checked first against known results. Advertising/analytics counts are domains, not companies; bing.com counted only where Microsoft's ad tag (bat.bing.com) loaded; review widgets not counted.",
 "license": "CC BY 4.0 \u2014 reuse with credit to Filozy (filozy.com)",
 "corrections": "admin.filozy@gmail.com",
 "services": [
  {
   "name": "Filozy",
   "url": "https://filozy.com/compress-pdf/",
   "result": "no upload observed",
   "uploadedTo": [],
   "when": null,
   "uploadHosts": [],
   "loadRequests": 19,
   "trackerDomains": [
    "cloudflareinsights.com"
   ],
   "thirdPartyDomains": [
    "cloudflareinsights.com"
   ],
   "cookies": 0,
   "note": "Its one analytics domain is Cloudflare's cookieless Web Analytics, which sets no cookies. The file never left the browser after Compress was pressed."
  },
  {
   "name": "iLovePDF",
   "url": "https://www.ilovepdf.com/compress_pdf",
   "result": "uploaded",
   "uploadedTo": [
    "api6.ilovepdf.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "api6.ilovepdf.com"
   ],
   "loadRequests": 104,
   "trackerDomains": [
    "adsrvr.org",
    "adtrafficquality.google",
    "bidswitch.net",
    "clarity.ms",
    "contextweb.com",
    "criteo.com",
    "criteo.net",
    "doubleclick.net",
    "google-analytics.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "media.net",
    "openx.net"
   ],
   "thirdPartyDomains": [
    "adsrvr.org",
    "adtrafficquality.google",
    "akamaihd.net",
    "akamaized.net",
    "bidr.io",
    "bidswitch.net",
    "clarity.ms",
    "contextweb.com",
    "creativecdn.com",
    "criteo.com",
    "criteo.net",
    "doubleclick.net",
    "google-analytics.com",
    "google.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "media.net",
    "mfadsrvr.com",
    "microsoft.com",
    "openx.net",
    "openxcdn.net",
    "pm-serv.co",
    "rfihub.com",
    "tapad.com",
    "turn.com",
    "w55c.net",
    "yahoo.com"
   ],
   "cookies": 54,
   "note": ""
  },
  {
   "name": "Smallpdf",
   "url": "https://smallpdf.com/compress-pdf",
   "result": "uploaded",
   "uploadedTo": [
    "Smallpdf's cloud storage bucket (Cloudflare R2)"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "smallpdf-production-files.0eb7351a55248d53ef0d306ef341ddfd.r2.cloudflarestorage.com"
   ],
   "loadRequests": 48,
   "trackerDomains": [
    "bing.com",
    "clarity.ms",
    "google-analytics.com",
    "googlesyndication.com",
    "googletagmanager.com"
   ],
   "thirdPartyDomains": [
    "bing.com",
    "bing.net",
    "clarity.ms",
    "google-analytics.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "trackjs.com",
    "wordlift.io"
   ],
   "cookies": 11,
   "note": "The file went straight to a cloud storage bucket named smallpdf-production-files, rather than to a Smallpdf server."
  },
  {
   "name": "Adobe Acrobat online",
   "url": "https://www.adobe.com/acrobat/online/compress-pdf.html",
   "result": "not testable",
   "uploadedTo": [],
   "when": null,
   "uploadHosts": [],
   "loadRequests": null,
   "trackerDomains": [],
   "thirdPartyDomains": [],
   "cookies": null,
   "note": "Adobe's site refused the automated test browser, so nothing could be measured."
  },
  {
   "name": "PDF24 Tools",
   "url": "https://tools.pdf24.org/en/compress-pdf",
   "result": "uploaded",
   "uploadedTo": [
    "filetools24.pdf24.org"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "filetools24.pdf24.org"
   ],
   "loadRequests": 81,
   "trackerDomains": [
    "adnxs.com",
    "adtrafficquality.google",
    "casalemedia.com",
    "doubleclick.net",
    "googlesyndication.com",
    "googletagmanager.com"
   ],
   "thirdPartyDomains": [
    "2mdn.net",
    "adnxs.com",
    "adtrafficquality.google",
    "casalemedia.com",
    "doubleclick.net",
    "doubleverify.com",
    "google.ca",
    "google.com",
    "googlesyndication.com",
    "googletagmanager.com"
   ],
   "cookies": 16,
   "note": ""
  },
  {
   "name": "Sejda",
   "url": "https://www.sejda.com/compress-pdf",
   "result": "uploaded",
   "uploadedTo": [
    "www.sejda.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "www.sejda.com"
   ],
   "loadRequests": 9,
   "trackerDomains": [],
   "thirdPartyDomains": [],
   "cookies": 3,
   "note": "No advertising or analytics domains and three cookies on load, the lightest of the upload-based sites."
  },
  {
   "name": "Soda PDF",
   "url": "https://www.sodapdf.com/compress-pdf/",
   "result": "uploaded",
   "uploadedTo": [
    "api-gw.sodapdf.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "api-gw.sodapdf.com"
   ],
   "loadRequests": 91,
   "trackerDomains": [
    "clarity.ms",
    "facebook.net",
    "googlesyndication.com",
    "googletagmanager.com",
    "plausible.io"
   ],
   "thirdPartyDomains": [
    "avanquest.com",
    "bing.com",
    "clarity.ms",
    "cookielaw.org",
    "facebook.net",
    "google.com",
    "googleapis.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "gstatic.com",
    "onetrust.com",
    "openai.com",
    "plausible.io",
    "trustpilot.com",
    "upclick.com"
   ],
   "cookies": 20,
   "note": ""
  },
  {
   "name": "PDF Candy",
   "url": "https://pdfcandy.com/compress-pdf.html",
   "result": "uploaded",
   "uploadedTo": [
    "s34.api.pdfcandy.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "s34.api.pdfcandy.com"
   ],
   "loadRequests": 23,
   "trackerDomains": [
    "google-analytics.com",
    "googletagmanager.com"
   ],
   "thirdPartyDomains": [
    "google-analytics.com",
    "googletagmanager.com"
   ],
   "cookies": 6,
   "note": ""
  },
  {
   "name": "TinyWow",
   "url": "https://tinywow.com/pdf/compress",
   "result": "uploaded",
   "uploadedTo": [
    "tinywow.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "tinywow.com"
   ],
   "loadRequests": 7213,
   "trackerDomains": [
    "33across.com",
    "adnxs.com",
    "adroll.com",
    "adsrvr.org",
    "adtrafficquality.google",
    "agkn.com",
    "amazon-adsystem.com",
    "bidswitch.net",
    "casalemedia.com",
    "cloudflareinsights.com",
    "contextweb.com",
    "criteo.com",
    "criteo.net",
    "demdex.net",
    "doubleclick.net",
    "everesttech.net",
    "google-analytics.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "gumgum.com",
    "indexww.com",
    "krxd.net",
    "lijit.com",
    "mathtag.com",
    "media.net",
    "openx.net",
    "outbrain.com",
    "pubmatic.com",
    "quantserve.com",
    "rlcdn.com",
    "rubiconproject.com",
    "scorecardresearch.com",
    "sharethrough.com",
    "smartadserver.com",
    "taboola.com",
    "yieldmo.com"
   ],
   "thirdPartyDomains": [
    "1rx.io",
    "2mdn.net",
    "33across.com",
    "360yield.com",
    "3lift.com",
    "4dex.io",
    "a-mo.net",
    "a-mx.com",
    "acuityplatform.com",
    "ad-delivery.net",
    "ad.gt",
    "adentifi.com",
    "adform.net",
    "adgrx.com",
    "adition.com",
    "adkernel.com",
    "admanmedia.com",
    "admatic.de",
    "admixer.net",
    "adnxs.com",
    "adotmob.com",
    "adroll.com",
    "ads-tinyorbit.com",
    "adsrvr.org",
    "adstanding.com",
    "adtarget.biz",
    "adtech.ink",
    "adtelligent.com",
    "adtrafficquality.google",
    "advolve.io",
    "agkn.com",
    "amazon-adsystem.com",
    "amitydigital.io",
    "amxrtb.com",
    "aniview.com",
    "anyrtb.com",
    "apester.com",
    "appier.net",
    "appnerve.net",
    "avads.net",
    "balance-x.com",
    "betweendigital.com",
    "bidberry.net",
    "bidgx.com",
    "bidr.io",
    "bidswitch.net",
    "bidtheatre.com",
    "blismedia.com",
    "bounceexchange.com",
    "bouncex.net",
    "brand-display.com",
    "bricks-co.com",
    "btloader.com",
    "bttrack.com",
    "cadent.com",
    "casalemedia.com",
    "cdn-vitals.com",
    "cdnbasket.net",
    "cdnwidget.com",
    "chocolateplatform.com",
    "ck-ie.com",
    "clickagy.com",
    "cloudflare.com",
    "cloudflareinsights.com",
    "cognitivlabs.com",
    "colossusssp.com",
    "com.tr",
    "company-target.com",
    "connatix.com",
    "contextweb.com",
    "cootlogix.com",
    "copper6.com",
    "copper6.live",
    "creative-serving.com",
    "creativecdn.com",
    "criteo.com",
    "criteo.net",
    "crwdcntrl.net",
    "ctnsnet.com",
    "de17a.com",
    "deepintent.com",
    "delivrdsp.ai",
    "demdex.net",
    "disqus.com",
    "dmxleo.com",
    "dns-finder.com",
    "dotomi.com",
    "doubleclick.net",
    "drift-pixel.ai",
    "dxtech.ai",
    "eskimi.com",
    "eu-1-id5-sync.com",
    "everesttech.net",
    "eyeota.net",
    "floors.dev",
    "floxis.tech",
    "fsrv.io",
    "fwmrm.net",
    "gamoshi.io",
    "google-analytics.com",
    "google.ca",
    "google.com",
    "googleapis.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "googletagservices.com",
    "groovinads.com",
    "gstatic.com",
    "gumgum.com",
    "hadronid.net",
    "hybrid.ai",
    "id5-sync.com",
    "impactify.io",
    "impactify.media",
    "indexww.com",
    "infolinks.com",
    "ingage.tech",
    "inmobi.com",
    "intentiq.com",
    "ipredictive.com",
    "iprom.net",
    "iqm.com",
    "iqzone.com",
    "iqzonertb.live",
    "kargo.com",
    "krushmedia.com",
    "krxd.net",
    "kueez.com",
    "kueezrtb.com",
    "lemmadigital.com",
    "liadm.com",
    "liftdsp.com",
    "lijit.com",
    "linkedin.com",
    "lkqd.net",
    "loopme.me",
    "loudecho.ai",
    "marketiq.com",
    "marphezis.com",
    "mathtag.com",
    "measureadv.com",
    "media.net",
    "media6degrees.com",
    "mediago.io",
    "mediagotechnology.com",
    "mediarithmics.com",
    "mfadsrvr.com",
    "mgid.com",
    "minutemedia-prebid.com",
    "ml314.com",
    "mobilefuse.com",
    "moloco.com",
    "monetixads.com",
    "mxptint.net",
    "nextmillmedia.com",
    "nexverse.ai",
    "nrich.ai",
    "omnitagjs.com",
    "onaudience.com",
    "onetag-sys.com",
    "openwebmp.com",
    "openx.net",
    "opera.com",
    "optimise.net",
    "ortb.net",
    "ottadvisors.com",
    "outbrain.com",
    "p7cloud.net",
    "pacvue.com",
    "pinklion.io",
    "pippio.com",
    "playdigo.com",
    "pmbmonetize.live",
    "postrelease.com",
    "presage.io",
    "primis.tech",
    "pro-market.net",
    "programmaticx.ai",
    "pub.network",
    "pubeasy.io",
    "pubmatic.com",
    "quantserve.com",
    "rapidedge.io",
    "rbstsystems.live",
    "resetdigital.co",
    "rfihub.com",
    "richaudience.com",
    "rlcdn.com",
    "rqtrk.eu",
    "rtactivate.com",
    "rtb-oveeo.com",
    "rtb.mx",
    "rtbwise.com",
    "rubiconproject.com",
    "sascdn.com",
    "scorecardresearch.com",
    "seedtag.com",
    "semasio.net",
    "servenobid.com",
    "serverbid.com",
    "sharethrough.com",
    "shb-sync.com",
    "simpli.fi",
    "sitescout.com",
    "smaato.net",
    "smartadhi.com",
    "smartadserver.com",
    "smartytouch.co",
    "smilewanted.com",
    "sonobi.com",
    "sparteo.com",
    "sportradarserving.com",
    "spot.im",
    "springserve.com",
    "stackadapt.com",
    "streamrail.com",
    "stripe.com",
    "sundaysky.com",
    "syncingbridge.com",
    "t13.io",
    "taboola.com",
    "tapad.com",
    "taptapnetworks.com",
    "technoratimedia.com",
    "temu.com",
    "the-ozone-project.com",
    "thecas.xyz",
    "thrtle.com",
    "tracookiepixel.xyz",
    "tremorhub.com",
    "tribalfusion.com",
    "trustedstack.com",
    "turn.com",
    "tynt.com",
    "undertone.com",
    "unpkg.com",
    "unrulymedia.com",
    "vdo.ai",
    "vistarsagency.com",
    "visx.net",
    "w55c.net",
    "webcontentassessor.com",
    "wknd.ai",
    "wp.pl",
    "wurflcloud.com",
    "yahoo.com",
    "yellowblue.io",
    "yieldmo.com",
    "ymmobi.com",
    "zemanta.com"
   ],
   "cookies": 613,
   "note": "Within 15 seconds of opening, with no interaction, the page made about 7,000 requests to over 400 servers and set 613 cookies. A second measurement the same day found 7,031 requests and 650 cookies from 212 domains."
  },
  {
   "name": "CloudConvert",
   "url": "https://cloudconvert.com/compress-pdf",
   "result": "uploaded",
   "uploadedTo": [
    "eu-central.storage.cloudconvert.com"
   ],
   "when": "after pressing Compress",
   "uploadHosts": [
    "eu-central.storage.cloudconvert.com"
   ],
   "loadRequests": 63,
   "trackerDomains": [],
   "thirdPartyDomains": [],
   "cookies": 0,
   "note": "Uploaded only once Compress was pressed, and loaded no advertising or analytics domains and set no cookies beforehand."
  },
  {
   "name": "PDF2Go",
   "url": "https://www.pdf2go.com/compress-pdf",
   "result": "uploaded",
   "uploadedTo": [
    "www20.pdf2go.com"
   ],
   "when": "as soon as the file was chosen",
   "uploadHosts": [
    "www20.pdf2go.com"
   ],
   "loadRequests": 171,
   "trackerDomains": [
    "adtrafficquality.google",
    "clarity.ms",
    "doubleclick.net",
    "googlesyndication.com",
    "googletagmanager.com"
   ],
   "thirdPartyDomains": [
    "",
    "2mdn.net",
    "adtrafficquality.google",
    "bing.com",
    "clarity.ms",
    "createjs.com",
    "doubleclick.net",
    "google.ca",
    "google.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "moatads.com"
   ],
   "cookies": 27,
   "note": ""
  },
  {
   "name": "Xodo",
   "url": "https://xodo.com/compress-pdf",
   "result": "not testable",
   "uploadedTo": [],
   "when": null,
   "uploadHosts": [],
   "loadRequests": 189,
   "trackerDomains": [
    "bing.com",
    "doubleclick.net",
    "facebook.com",
    "facebook.net",
    "googletagmanager.com",
    "heapanalytics.com",
    "matomo.cloud"
   ],
   "thirdPartyDomains": [
    "",
    "bing.com",
    "doubleclick.net",
    "facebook.com",
    "facebook.net",
    "featureassets.org",
    "g2.com",
    "google.ca",
    "google.com",
    "googletagmanager.com",
    "heap-api.com",
    "heapanalytics.com",
    "lightboxcdn.com",
    "matomo.cloud",
    "osano.com",
    "prodregistryv2.org",
    "sprig.com",
    "stripe.com",
    "stripe.network",
    "typekit.net",
    "zeropartyforms.com"
   ],
   "cookies": 29,
   "note": "The test file was not accepted by the page's picker in our automated run, so no upload result is reported. Xodo's own page says files are \"permanently deleted after 1h\"."
  }
 ]
}