PDF privacy basics
What can be hidden inside a PDF?
PDF metadata and document properties
Every PDF has room for descriptive information about itself, known as PDF metadata. Common fields include the title, author, subject and keywords, the application that created the document, the software that produced the PDF, and creation and modification dates. Many of these are filled in automatically from your computer account or the app you used, so a file can carry your name — or a colleague's — without anyone typing it. Some files also keep a separate XMP metadata block that repeats or extends the same details. You can view PDF metadata to see what a file holds, or remove metadata from a PDF before it leaves your hands.
PDF comments and annotations
PDF comments and PDF annotations are stored as separate objects layered on top of the page: sticky notes, highlights, strike-throughs, drawn shapes and review replies. Some are hidden when printed or collapsed in certain viewers, which is how review notes end up travelling with a “final” version. Checking for them, and removing comments from a PDF or removing supported annotations where needed, is often the most important step before a document goes outside your team.
Form data, attachments and actions
Fillable forms keep the values typed into each field, and you can clear PDF form fields while keeping the form. A PDF can also embed other files as attachments, which you can remove from a PDF, and include actions or scripts that run when the document is opened, which you can remove from a PDF without running them. None of these is automatically a problem, but each is worth knowing about before you share.
Cleaning, flattening and safe sharing
Cleaning removes selected information from the file. When you flatten a PDF, annotations and form fields are merged into the page so they can no longer be edited — but their visible content remains. Flattening is useful for locking a finished form; it is not a way to remove text you don't want to share, and neither is drawing a black box over it.
Good PDF privacy is mostly a habit: check the file, remove what you don't want to share, then send the clean copy.