mrusman.com / Rana Usman

Private PDF Toolkit user guide

Version 1.0.0 · 2026-11-09 · Windows x64

Start with a new copy

Choose a tool, add your PDF files or images, choose options and an output folder, then Start. Each job writes new files; originals are never changed. Existing names get a numbered suffix. Output equal to an input is refused. The queue runs one job at a time; expand it to see each result, cancel, show a file or open its output folder. One bad item does not stop the rest. Check every output before using it.

Combine and arrange pages

Merge keeps the first input's bookmarks; it does not combine all document bookmarks. Split, extract and delete use page ranges such as 1-3,7,9-end. Split may lose bookmarks. Kept-page annotations, comments, links, form values and page labels are intended to survive; appearances can vary and the full appearance matrix still needs visual acceptance. Tagged structure, attachments and document JavaScript are not guaranteed. XFA forms warn. A digital signature in an input is broken in a changed copy; confirm the warning. No form filling, flattening, PDF/A conformance, OCR or content editing is provided.

Organizer and keyboard

Select pages with click, Ctrl-click or Shift-click. Drag to reorder; Alt+arrow moves selected pages, R rotates, Delete removes, Ctrl+A selects all, Ctrl+Z undoes and Ctrl+Y redoes. Save as new PDF writes a new copy. Rotation is relative to the displayed page. Closing unsaved organizer work asks for confirmation.

Compression

Choose Print, Office or Email. Only eligible images are changed. Text, vectors, fonts and the hidden searchable text layer are kept. A checked image change may be reverted. CMYK, Lab, Separation, DeviceN, image masks, bilevel, JBIG2, JPEG 2000 and inline images are generally kept. If no smaller result is available, no output is written: This file could not be made smaller. No new file was written. Your original is unchanged. Results depend on the document. No reduction is promised.

Images and exports

Images to PDF accepts JPG, PNG, WebP and TIFF, up to 500 inputs. Choose fit-to-image, A4 or Letter. PDF to images exports PNG or JPG at 96, 150 or 300 DPI into a new numbered folder. Pages above the 100-megapixel cap are refused. CMYK image inputs are refused; use an RGB copy. Corrupt or unsupported image data can fail an item.

Stamps, numbers and signature pictures

Stamp text currently supports WinAnsi: Latin letters, numbers and common symbols. Other scripts are refused; Arabic and Urdu stamps are unavailable. A stamp or signature picture adds ordinary page content, hides or removes nothing, does not lock the file and can be edited by other software. This places a picture of your signature on the page. It is not a digital certificate and does not prove who signed. Ask your legal adviser whether a picture of a signature is acceptable for your document. Remember image is off by default. Opting in stores it encrypted for this Windows user; Settings can delete it. The option is unavailable without Windows encryption support.

Passwords

Protect writes AES-256 with one password entered twice. If you forget this password, nobody can open the file. We cannot recover it. Passwords support UTF-8 up to 127 bytes; newlines are refused. A short password warns. Remove password uses the password you know; it does not guess or bypass. Permission restrictions require the owner password. Certificate-protected PDFs are refused. Legacy RC4 inputs can open with the right password; new protection is AES-256. Keep input password is on by default. When merging different encrypted inputs, supply an output password or deliberately turn protection off.

Fonts, JPEG 2000 and limits

Non-embedded standard PDF fonts use installed Windows fonts, so appearance can vary between PCs. Symbol and Dingbats Unicode fallback has known limits. Some JPEG 2000 (JPX) files differ between renderers. Some Arabic public samples fail text-identity verification (G2); the app refuses that output. A synthetic four-page physical 1 GB document with unreachable image streams was refused in earlier resource checks. Acceptance of such files is not guaranteed. The tested 2,000-page/1 GB range is not a blanket guarantee: work, memory, page-pixel and free-space guards can refuse a file. Larger files are outside tested limits. Merge accepts up to 500 files; other PDF batches up to 200. Damaged, changed-after-add, missing, locked or unsupported documents can fail with a typed message. Use a smaller file or another writable folder when asked.

Privacy and recovery

The app makes no uploads, telemetry requests, update checks or runtime downloads. PDF links are not followed, PDF JavaScript is not run and embedded files are not opened. Work is under the private local work folder. A decrypted working copy may exist there during compression. Work and partial outputs are removed on finish, cancel and next startup after a crash; locked remnants can wait for the next start. This is normal deletion, not secure erasure. SSDs, backups and Windows can retain recoverable data. Passwords remain in memory, never settings, logs or command lines; JavaScript cannot guarantee memory erasure. Thumbnails stay in memory. There is no recent-file list; Windows file dialogs may remember paths. Crash upload is off. OS-wide dumps and external tracing still require installed/device review. Diagnostics contain technical fields and error codes, not document names, paths, passwords, licence keys or machine codes. Nothing is sent automatically.

Trial and licence

The full trial lasts 7 days, with all features and no watermark. When it expires you can still open files and preview pages; starting a job requires a valid key. Already running work finishes. Queued jobs recheck permission before starting. Clock rollback ends the trial. In Licence settings, copy the machine code and send it to the owner; apply the key supplied for this product and PC. A one-time key keeps its covered build working after the update period ends. A monthly key works through its local-calendar end date. Once both that key and the trial have ended, new and queued jobs are refused; files still open and preview, and an already running job finishes. The owner supplies a new monthly key for each new period. Applying a newer valid key restores jobs. Clock rollback latches the monthly key as ended until a newer key is applied; reapplying the same key does not clear it. Buy opens mrusman.com in your system browser only when clicked. There is no online activation.

Local data, libraries and uninstall

Setup and portable use the same local app-data identity, so switching does not reset the trial. Program removal keeps document outputs and local settings/licence data. The EULA and complete open-source notices are available offline from Settings and in resources. LGPL libraries can be replaced with compatible modified builds; see SHARP_LGPL.md and keep both corresponding-source ZIPs beside every binary download. No integrity check blocks library replacement. Store installations are protected; use Setup or portable for replacement. Microsoft runtime files are separately licensed, not open-source. Lawyer review, weaker-PC tests, managed-PC acceptance and second-PC installation remain owner checks.