No — this is the whole point for visa paperwork. Your documents are opened, rendered with pdfjs, masked by flattening and merged with pdf-lib entirely on your device, with no server, no API and no CDN call for your files; the page even works offline once cached. Nothing is sent, logged or stored. That is exactly why you should never use a random online “visa document” or “merge passport scans” site — those upload your passport and bank statements to a stranger’s server. Here, only the merged PDF or ZIP you choose to export leaves the page, and closing the tab discards everything.

A typical tourist / visitor visa needs a valid passport (often 6+ months validity with blank pages), a passport-size photo to the consulate’s spec, the completed application form (for example DS-160 or the Schengen form), proof of funds or recent bank statements, a travel itinerary or flight booking, accommodation or hotel booking, travel insurance, a cover letter explaining your trip, and often an employer / NOC letter or an invitation letter. Business, student and work visas swap in their own documents (invitation, enrolment / I-20, job offer, qualifications). The exact required documents, photo specifications, formats and order vary by destination country, consulate / VFS and visa category and change often, so always follow the official embassy / VFS checklist for your specific application. This tool gives you a checklist per visa type to organize against, but it is general guidance, not the official list.

Yes. Many consulates and VFS centres want all your supporting documents in a single PDF in a particular order. Upload your passport, photo, form, proof of funds, itinerary, accommodation and supporting letters (images or PDFs), arrange them with the up/down arrows, set the applicant name and destination, and export one merged PDF that starts with an auto-generated cover/index page listing every document. If a portal instead wants each file separately, export the ZIP, which contains each document flattened (masks baked in) on its own. Both are built entirely in your browser.

It is good practice to share only what the consulate needs. In this tool you draw black boxes over details you don’t need to disclose — the full bank-account number and long reference numbers, a booking PNR, a policy number, or even the exact balance if you only need to demonstrate sufficient funds. The masking is real: each box is painted onto the page image and the PDF is rebuilt from those images, so the hidden content is physically gone with no recoverable text layer. But you place the boxes, so cover every detail you want hidden, zoom in to review each page before exporting, and never mask anything the consulate actually requires to see.