Trust
It can't phone home. There's no phone.
Minimal PDF contains no networking code. It makes no update checks, sends no crash reports and collects no usage statistics. Here is exactly what it touches, how to check it yourself, and the fingerprints of every file we publish.
- Network
- None. The program has no code that opens a connection. You can watch it in Resource Monitor while it runs; it never appears under Network.
- Your files
- Version 1.0 opens PDFs read-only and never writes to them.
- Everything else on disk
- No settings, caches, logs or registry keys of its own, and opening a file with Ctrl+O doesn't add it to Windows' Recent list. The installer writes the usual uninstall entry and the Open with registration, and removes both when you uninstall.
- Parsing
- PDFs are parsed and drawn by Windows.Data.Pdf, the engine inside Windows, which Windows Update keeps patched. The app doesn't run JavaScript, form logic or embedded files.
- Permissions
- It runs as a normal user and never asks for administrator rights. The installer is per-user.
- Other code
- Only Microsoft's: the Windows SDK bridge and the WinRT runtime library, bundled inside the program file. No third-party libraries.
- Source
- MIT licence. The source goes public on GitHub with the first public release, and each release is built from a tagged commit by a public workflow.
- Signing
- Early-access builds are not code-signed yet, so Windows SmartScreen will warn you. Signed releases will name Federico Etinger as publisher. Until then, compare the SHA-256 below.
Check what you downloaded.
In PowerShell, run Get-FileHash .\MinimalPdf-Setup-x64.exe and compare the result with the table. GitHub records the same digest for every release file.
Fingerprints appear here with the first release.
Each release lists every file with its size and SHA-256, taken from GitHub's own record of the upload.
This website
No cookies, no analytics, no one else's scripts.
This site is plain HTML, one stylesheet and one small script. The fonts are served from here. There are no cookies, no analytics, no tracking pixels and no requests to anyone else, so there's nothing to consent to. It's hosted on Cloudflare Pages, which, like any web host, sees the address your request comes from.
Found a security problem in Minimal PDF? Private reporting through GitHub's security advisory form opens with the public source release.