Merge PDF Free: What Happens to Your Upload

You have several PDFs, you want one file, and the free site you found to merge PDF files says nothing about what happens to them once they are dropped in. Free mergers fall into two groups, and the group a tool belongs to decides how far you have to trust it with the file.

A tool either assembles the file on your own machine or sends it to a server that deletes it later. Two vendors, Smallpdf and Sejda, publish how long that server copy stays.

Merge PDF free online: what happens to your upload

A merger that uploads the file leaves a copy on someone else's server until a deletion job runs, so the published deletion time is the figure that matters. The word "secure" on a tool page is a claim, and a stated time is a fact. Smallpdf states one hour and Sejda states two hours(as of September 2026).

A merger that runs in the browser builds the file on the device, so no copy exists to delete. Below, “Where the file goes and how long it stays (as of September 2026)” puts the two stated cases next to the no-upload case.

Where the file goes and how long it stays (as of September 2026)

Tool	Uploaded	Kept for	Free cap
Smallpdf	Yes	One hour	Not stated
Sejda	Yes	Two hours	50 pages, 50 MB, 3 tasks per hour
Browser merger	No	Nothing to delete	Set by the tool

The other free mergers in this category, such as iLovePDF, PDF24 and Adobe, publish their own terms on their own pages. Read the storage terms there before a contract goes in, since the two figures in “Where the file goes and how long it stays (as of September 2026)” apply to Smallpdf and Sejda only.

Smallpdf and Sejda: how long each keeps your files

The two vendors that state a deletion time state different ones, and the gap is a factor of two. Both sit in the same category of free online tools, so the difference comes from each vendor's own server rules and not from the job being done.

Smallpdf: TLS in transit, deletion after one hour

Smallpdf states that PDFs are encrypted using TLS and automatically deleted from its servers after one hour. TLS protects the file on the way to the server, and the deletion time covers what happens once it arrives. Whether Smallpdf is safe for a given file therefore depends on whether one hour on its servers is acceptable for that document.

Smallpdf also describes its merger as cloud-based. In plain terms, the merge runs on its servers and spares the resources of your device.

Sejda: deletion after two hours

Sejda states that files are deleted automatically after two hours, and that they are permanently deleted once processing finishes. Two hours is twice the time Smallpdf states for the same job. A signed contract or a set of medical records is the kind of file where that extra hour is worth a thought before using Sejda to merge PDF files.

Free limits to check before you combine PDF files

A limit counted per hour stops a batch earlier than a limit counted per file, because the wait starts before the stack is finished. Sejda's free service takes documents up to 50 pages or 50 MB, and allows 3 tasks per hour(as of September 2026); the last figure is a rate, so a fourth merge in the same hour waits. A reader working through scanned invoices has to stop at the fourth file, not the first.

Smallpdf states that the tool is free to use, with no registration or download needed. Merge PDF files, combine PDF files and join PDF all name the same job, putting several documents into one file, and the free limits apply the same way under any of the three names.

Combine PDF files in your browser without an upload

A merge that runs on the device itself leaves no stored copy to trust, because the file never needs a server. Smallpdf's own page shows the contrast: cloud-based processing saves the resources of the device, and the price of that saving is an upload followed by a wait for deletion. A browser-based merger does the same job in the tab and skips both steps.

Joining a contract with its signed annex, or several scans into one application file, is a job that fits this route: drop the files in, set the order and download the single result. Merging on the device also means a revised annex can be swapped in and the file rebuilt without a second upload or a second wait for deletion. To merge PDF files into one, try the free PDF merge tool.

Which merge PDF tool suits a confidential document?

A file you would not email to a stranger belongs in a merger that never uploads it, and every other file can go through any of the tools compared here. The choice by situation runs as follows:

• Contract, medical record or client list: use a browser merger, because nothing is stored on a server.
• Document that can sit on a server for a short time: use Smallpdf, which states one hour, or Sejda, which states two hours.
• Batch of many files: split the work across hours when using Sejda's free tier, since a fourth merge in the same hour waits, or use a browser merger.

The rule behind the list is short. The more a file would hurt if a stranger read it, the less time it should spend on a server, and a merge that never leaves the device spends none. Documents with no such risk can use whichever free tool is open, and only the batch case needs a second look at the hourly rate.

Summary: how long a file stays decides the tool

Smallpdf states one hour and Sejda two hours on their servers, while a merger that runs in the browser leaves no server copy at all. These are the vendors' own published figures, and policies can change, so recheck the vendor page before uploading a confidential file.