“Nothing is uploaded” is a claim worth spelling out. When you choose a file, the browser hands this page a reference to it on your disk — the same mechanism that lets you attach a file to an email without the page reading your whole drive. The bytes are read into memory in this tab. Nothing is sent anywhere, because there is no endpoint on our side that accepts a document.
The work itself runs in a Web Worker: a second thread inside the same tab. That is why a 300-page merge does not freeze the interface and why the progress messages update while it runs. The worker builds a brand-new PDF, hands the finished bytes back, and the download you get is generated on your own machine.
When you close the tab, all of it is gone. There is no history to clear, no account holding a copy, and nothing for us to hand over if someone asks — we never had it. The practical consequence is worth knowing: nothing can be recovered after the fact, so save the result before you close the tab.