How Free Online Tools Make Money
A reader emailed me through the feedback form after merging a stack of scanned tax documents with the PDF tool on this site. He wanted to know: hosting costs you money, the tool cost me nothing, so who pays, and what is the catch. He signed off with "no offence." None taken. He asked the one question I wish more people asked before uploading files to a stranger's website, and he deserves a longer answer than a link to a privacy policy.
The answer depends on who pays the tool's bills, because whoever pays them shapes how the tool treats you. A free utility is a small business wearing a costume. I run one, so I will start with my own books and work outward from there.
What pays for Toolium
Toolium is built to run on display ads. An ad network sells space on the pages, advertisers pay the network for impressions and clicks, and a fraction of that reaches me. My hosting sits on a low-cost tier because the tools do their work inside your browser: my server sends you a page of JavaScript and then goes back to sleep. Your files never travel to me. I could not read them if I wanted to, and I want to be precise about why. The conversion code executes on your machine, so no copy of your file ever exists on mine. A promise of restraint would require you to trust me; the architecture removes the need.
Ads still cost you something, in a currency other than money. They clutter the page. They load third-party scripts, and those scripts set cookies and report your visit to companies you have never heard of. I choose where the ad slots go and I keep them away from the tool controls, but I cannot pretend the scripts weigh nothing. When someone runs an ad blocker, I understand the impulse, even though blocked ads are the ones meant to pay for the hosting. The bargain: you tolerate some visual noise and a tracker or two, the ads cover the hosting, and your file contents stay on your machine. Whether that trade suits you is your call, and you can only make the call if I say the terms out loud.
Freemium, or the ceiling you were meant to hit
Most file tools with polished landing pages run on freemium. The free tier exists to be outgrown. You get three conversions a day, or files under 20 megabytes, or output stamped with a watermark, and a pricing page waits for the moment a limit bites. The users who convert to paid plans tend to hit the ceiling at a desperate moment, often minutes before a deadline, which is why the caps sit where they sit. Nobody places a size limit at 20 megabytes by accident. Someone studied where the median resume ends and the median contract begins.
I do not think freemium is dishonest. The developer names a price and you can read it before you commit anything. You should treat the free tier as a demo engineered to fail at a chosen moment rather than as a gift, though, because the difference matters when a deadline is involved. The watermark you discover after generating the file you needed came as a surprise to you and to nobody else in the transaction.
When the file is the payment
This model should change how you behave. Some free tools show no ads and sell no upgrades because the operator wants the uploads themselves. A server-side converter has to receive your file to process it, and once your file sits on someone else's disk, only the operator knows how long it stays there. Read generously, he deletes everything within the hour, as most privacy policies claim. Read less generously, he mines the documents for marketing signals or training data, or keeps them indefinitely because storage costs him pennies while deletion takes engineering effort. You cannot audit any of this from the outside, and the phrase "we may use your data to improve our services" stretches to cover a remarkable amount of behavior.
I cannot point at a specific site and prove it harvests uploads, and I will not guess at names. I can tell you how to spot the risk. An operator whose server touches your file has the ability to keep it, whatever his policy promises. An operator whose tool runs entirely in your browser does not, and you can verify which kind you are dealing with in about a minute: open your browser's developer tools, switch to the network tab, and run the conversion. If the file leaves your machine, you will see the request, and its size will roughly match your document. If the panel stays quiet, your browser sent nothing, and nobody upstream kept anything. I built Toolium to run browser-side partly because servers that process files cost money I did not have, so the cheap option and the private option turned out to be the same option. I would like to claim foresight. It was a hosting bill.
Affiliate funnels and other people's money
Two more models look free from the street and behave differently once you are inside.
The affiliate funnel comes first. You search for a converter, you land on a page promising one click, and the big green button downloads an installer for a paid desktop suite, or the tool works once and then steers you toward a partner product with a trial attached. The software vendor pays the site owner a commission for every install or sale he refers, so the page exists as a doorway and the owner collects a toll for each person who walks through it. You can recognize the pattern by the mismatch between promise and flow: a web tool has no reason to ask you to download software before doing its one job.
Venture subsidy is the slower version. Investors pay a company's bills for years so it can offer a free tier far more generous than the revenue underneath it, and the plan, sometimes written into the pitch deck, is to capture your habit first and charge for it later. You have watched the cycle if you have used the web for a decade: a beloved free service grows, the funding dries up or an acquirer arrives, and the new owners add limits, move features behind plans, and, in the quieter cases, slip a clause into the terms about training models on your content. Nobody lied, exactly. The subsidy ended, and the tool you relied on became a different tool with the same name and your data already inside it. When a company gives you more free compute than any visible business supports, you should assume the terms will change once someone needs the money back.
Donations, and why your favorite tool shows ads anyway
Donation-funded and open-source tools deserve a kinder paragraph, and a realistic one. A developer publishes something useful, hosts it out of pocket or on a free tier, and puts a donation link in the footer. At small scale this works, and some lovely corners of the web run on it. At popular scale the maintainer starts losing money on every new user, because bandwidth and compute bills grow with traffic while donations barely move. People who study open-source funding keep finding donation rates near a rounding error. A free hosting tier that held up at ten thousand visits starts throttling at a million, and the maintainer then chooses between paying hundreds of dollars a month for strangers' convenience, adding ads, adding a paid tier, or letting the project rot. Many of the dead tools on page two of your search results made that last choice by making no choice. Donations would be a lovely way to run this. The arithmetic did not support it.
Work out who pays before you upload
I promised the user with the tax documents a throughline, and it is this: you can identify a tool's funding model from the outside, and once you have it, you can predict what the operator wants from you. An ad-funded owner sells your attention and lets a network track your visit. A freemium developer waits for you to hit a wall on a bad day. An affiliate owner collects a commission when you click through to somewhere that charges. A subsidized company banks your habit and collects later. A harvester takes the file itself, which is the only cost on this list you cannot get back. Before you upload anything you would not hand to a stranger, spend the minute: check for ads, check for a pricing page, check who funds the company, and watch the network tab while the tool runs. If you cannot figure out how a free tool pays its bills, treat that as your answer.
The user wrote back after I sent him a shorter version of this. He had checked the network tab, watched nothing leave his machine, and left his ad blocker off for the session as payment. I have had worse business transactions. If you want the specifics of what runs where on this site, the about page lists them, and the feedback form reaches a person who answers.