Clear about your files. Honest about our limits.

Start with the official website

Use https://html-onlineviewer.com/ and check the address before signing in. Our official X profile is @HTMLOnlineview. Our About page links to our other project profiles. We are not affiliated with iLovePDF or other similarly named viewers.

Do not share your password, reset link or session cookie with anyone claiming to offer support. Report suspected impersonation through the contact below.

What stays on your device?

Which actions use the cloud?

The clearly labelled cloud HTML-to-PDF, URL-to-PDF, screenshot and rendered-source actions send the submitted HTML or public URL to a Cloudflare-hosted renderer. A SlideShare metadata check requests its public page. Do not submit confidential documents, credentials or private-network addresses.

Cloud conversions have request-size, time and rate limits. Common local/IP destinations are rejected, with additional browser request filters. These checks are not a guarantee against every malicious URL or DNS behaviour. Local system printing is an alternative for pasted HTML.

Accounts, analytics and advertising

Guest learning remains available. Optional accounts store account details, password hashes, sessions and course progress, not editor drafts or generated tool files. Account requests have origin checks and rate limits. Password resets expire and revoke existing sessions after a successful reset.

Aggregate tool events do not include filenames, file contents, editor text or account identifiers. Hosting and security logs may still contain technical connection information. Google advertising and its privacy choices are separate from local file processing. See the privacy policy and cookie information.

Delete or remove your information

• Clear this website's browser data to remove local drafts and guest progress on that device.
• Delete downloaded files separately through your device's file manager.
• Request account-data access or deletion by emailing from your account address. Signing out does not delete server-side account records.

Report a vulnerability or suspicious behaviour

Email hello@html-onlineviewer.com with the subject Security report — html-onlineviewer.com. Describe the affected URL, expected behaviour, observed behaviour and a minimal example using synthetic data.

Do not access other users' records, run denial-of-service tests, submit real credentials, or include private documents. Please report privately rather than publishing exploitable details. No paid bug-bounty programme or guaranteed response time is offered.

Machine-readable contact: security.txt.