Skip to content
TrueRedact

About TrueRedact & The Reality of PDF Redaction

TrueRedact was created out of a simple observation: millions of renters, freelancers, legal professionals, and everyday individuals believe they are protecting their sensitive documents by drawing black rectangles in common PDF editors. In reality, they are leaving their most confidential numbers and personal details completely exposed.

  • 100% In-Browser
  • Zero Upload
  • Check Network Tab - 0 Requests
  • Works Offline

Proof: Open DevTools > Network > Upload a file > See 0 requests. Your file never leaves your RAM.

The Dangerous Illusion of Cosmetic Redaction

In standard PDF editors (including macOS Preview, basic web viewers, and standard drawing apps), adding a black box simply places a new vector rectangle object on top of the visual stack.

It does not delete the text characters beneath it. The original glyphs, character positions, font descriptors, and underlying vector paths remain embedded in the file stream. Anyone can:

  • Press Ctrl+A (or Cmd+A) and Ctrl+C to copy the entire page, revealing the hidden text when pasted into Notepad or Word.
  • Open the file in any text extractor (such as pdftotext or Python PDF libraries) and pull out bank balances, social security numbers, and client names instantaneously.
  • Delete the top visual layer in vector software like Adobe Illustrator, Inkscape, or Acrobat Pro, exposing the original text intact.

This exact mistake has led to high-profile leaks in congressional testimony, major corporate litigation, and intelligence reports. When applied to bank statements, loan applications, and rental verification packets, the consequences can be catastrophic for personal financial privacy.

How True Redaction Works

True redaction requires surgical modification of the PDF specification:

  1. Content Stream Tokenization: The document's internal graphics and content streams are decoded and parsed into individual operators (such as text showing commands Tj and TJ).
  2. Glyph Matrix Intersection: The engine tracks current transformation matrices (CTM), text matrices (Tm), font sizes, and character advances to calculate the precise geometric bounding box of every single character on the page.
  3. Physical Stream Deletion: Any glyph or vector path intersecting a user-designated redaction box is excised directly from the operand array. Neighboring character positions are adjusted so unredacted text does not shift or warp.
  4. Orphan Garbage Collection: Font subsets, XObjects, thumbnails, and structure trees associated with the deleted text are pruned from the document catalog so no residual bytes remain in the indirect object table.
  5. Independent Verification & Safe Raster Fallback: The resulting file is re-read by a secondary in-browser PDF parser. If complex embedded form XObjects or scanned graphics prevent safe structural deletion, the engine falls back to baking the boxes into a high-DPI raster image, guaranteeing zero text recovery.

The Zero-Upload Commitment

Existing “free PDF editor” websites often demand that you upload your confidential bank statement or contract to their cloud servers. You have no guarantee of who accesses those servers, where the files are stored, or whether they are indexed by internal scraping scripts.

TrueRedact was engineered with an absolute privacy architectural constraint: Zero Server Uploads. Every byte manipulation happens strictly within your browser's WebAssembly and JavaScript sandbox inside client RAM. Check your browser's Network tab during any operation to prove to yourself that 0 network requests are made.

Open, Transparent, and Free

TrueRedact is built using trusted open-source libraries including pdf-lib, pdfjs-dist, and exifr. It requires no user account, no email subscription, no payment, and no cookies.