PDF Privacy Scrubber — Remove Hidden Metadata & JavaScript

Strip hidden author info, embedded JavaScript, form data, and attachments from any PDF before sharing. Used by lawyers, journalists, and HR teams to prevent accidental data leaks.

Key Features

Removes 6 standard metadata fields plus XMP
Strips embedded JavaScript and document-open actions
Clears form fields and attachments
Honest about scope: removes hidden data, does not redact visible page text
Files auto-deleted within 1 hour
No account required

How It Works

Upload a single PDF via drag-and-drop
Choose what to remove: metadata, annotations, form data, JavaScript, attachments
Server uses pdf-lib to clear catalog and per-page entries
Title, Author, Subject, Keywords, Creator, Producer and XMP stream are wiped
Form fields, OpenAction, Names→JavaScript, Names→EmbeddedFiles, and /AF arrays are removed
Cleaned PDF is returned with a per-field scrub report

Frequently Asked Questions

What is hidden metadata in a PDF?

Most PDFs carry your name, software, computer username, edit history, and sometimes embedded JavaScript or attached files — all invisible on the page but readable by anyone with a PDF tool. This scrubber removes it.

Does this redact text on the page?

No. This tool removes hidden data from the PDF structure. To black out visible words on the page, you need a redaction tool with manual region drawing — for legally sensitive documents we recommend Adobe Acrobat Pro with verification.

Can I see what was removed?

Yes. After scrubbing you get a report listing exactly which metadata fields were cleared, how many annotations and form fields were removed, and whether JavaScript or attachments were found.

Will the cleaned PDF still open in all readers?

Yes. We only remove non-visible data. Page content, fonts, and layout stay intact and the PDF opens normally in Acrobat, Preview, browsers, and mobile readers.