How to Protect Your Photos and ID Documents When Using Online Tools
A resize tool should not need a copy of your Aadhaar. Here is how to check, and what to do instead.
Why this matters more for application documents
A photograph, a signature and an identity document together are what someone needs to impersonate you. Many free online converters work by uploading your file to their server, processing it there, and sending the result back. Some keep copies, some show heavy advertising, and some are simply careless with storage. For a holiday photo that may not matter. For an identity proof, it does.
Two kinds of tools
| Server-based tool | On-device tool | |
|---|---|---|
| Where your file goes | Uploaded to the website's server | Stays in your browser's memory |
| Works without internet after loading | No | Usually yes |
| Speed on a large file | Depends on your upload speed | Depends on your phone or computer |
| Risk to your document | Depends on the operator's practices | Very low, because nothing is sent |
ApplyReady is the second kind: the resizer, PDF tools, signature cleaner and resume builder all run in your browser. You should not have to take our word for it, so here are two ways to check any tool.
Check 1: the airplane-mode test
- Open the tool page and let it finish loading.
- Turn on airplane mode, or disconnect from Wi-Fi and mobile data.
- Choose a file and run the tool.
If the tool still produces a result, your file cannot have been uploaded, because there was no connection to upload it through. If it says "network error" or spins forever, the file was meant to go to a server. (Some pages show an offline message if they were never opened before; open the tool online once first.)
Check 2: watch the network
On a computer, open your browser's developer tools (F12 in most browsers), switch to the Network tab, and run the tool. A tool that uploads will show a large request, as big as your file, going out to some address. A tool that works on your device will show nothing of the kind.
Other signs of a careless site
- A "Download" button that is really an advertisement, or several buttons labelled Download.
- Watermarks added to your result, followed by a request to pay or sign up to remove them.
- A request to install software or a browser extension just to resize a picture.
- No privacy policy, no named owner and no way to contact anyone.
Habits that protect your documents
- Use the least that works. Upload only the pages and documents the notice asks for.
- Mask where the form allows. Some identity documents can be downloaded or shared in a masked form that hides part of the number. Use it where the portal accepts it.
- Add a purpose when you share a copy. A line such as "For SSC application only, dated 12 October" on a photocopy, if the recipient allows it, makes reuse harder.
- Avoid sending IDs over open chat groups. Send them one to one, and delete them from the chat afterwards if you can.
- Use your own device. On a shared computer or at a cyber cafe, delete downloaded files and clear the browser's download list when you finish. Do not enable "save draft" features on a shared device.
- Check the web address. Apply only through the address in the official notification. Fake application sites copy the look of real ones.
How ApplyReady handles data
Image and PDF processing happens in your browser. The resume builder keeps its optional draft in your browser's own storage, only if you switch drafts on, and you can delete it from the same panel. Our privacy policy describes what the site does collect (ordinary connection logs kept by our host, GitHub Pages, and advertising cookies from Google if ads are shown) and how to opt out.
Frequently asked questions
Is it unsafe to use any online converter?
Not necessarily, but you cannot always tell how a site stores your files. For identity documents and signatures, prefer tools that visibly work on your device, and use the airplane-mode test to verify.
Does an "HTTPS" lock mean the site is safe?
It means the connection to the site is encrypted. It does not tell you what the site does with your files after they arrive. Safety depends on the operator, not on the lock.
What should I do if I already uploaded an ID to a doubtful site?
Watch for unexpected calls, messages and account activity, change passwords linked to the document where relevant, and use the grievance or deletion contact on the site if it has one. Report suspected misuse to the relevant authority.
Is it safe to send documents by WhatsApp?
Messages are encrypted in transit, but copies stay on the recipient's phone and in backups. Send only to people you trust, one to one, and only what is necessary.
Does ApplyReady keep my files?
No. Files are processed in your browser. The resume builder saves a draft only if you turn on "Save draft on this device", and that draft stays in your own browser storage until you delete it.