Security

Your files stay on your device, and you can check

Our tools run inside your browser. Your file is processed on your own computer and never sent to us or anyone else. Here's how that works, how to verify it, and what it doesn't protect against.

How it's built

  • The work happens in your browser. The tool's code downloads to your device, and your file is read and processed there.
  • There's nowhere to upload to. This site is static files. It has no accounts, no database and no code that accepts a file.
  • The browser blocks other destinations. Our Content Security Policy tells your browser these pages may only connect back to this site, so a page can't quietly send data elsewhere.
  • No outside code. Scripts, fonts and libraries all come from this site. There are no ads, analytics or third-party trackers.
  • No account. The tools don't ask for your name or email, and we never receive your files. If you email us, we'll have that email.

Check it yourself

  1. Open a tool on a computer, then open your browser's developer tools: press F12 on Windows, or Cmd+Option+I on a Mac.
  2. Click the Network tab and clear the list.
  3. Use the tool with a file. You'll see the page download its own code and libraries from this site. Click any entry and check its Request Method under Headers: uploads use POST or PUT. There won't be any, and nothing goes to another website. The Size column won't help here, because it shows what came back rather than what was sent.
  4. For a second test, use a tool once, turn off your internet, and use it again. It keeps working, which shows the tool doesn't need a server to do the job.

To see the security policy, click any page in the Network tab and look for content-security-policy in its response headers.

What this doesn't protect against

  • Browser extensions can read what's on any page, including this one. For very sensitive documents, use a browser profile with none installed.
  • Malware on your computer can read your files whatever tool you use.
  • The results you share. Once you send a file to someone, its safety is out of our hands. Removing a watermark or hidden data from a copy doesn't affect copies already sent.
  • No independent audit yet. This page describes how the site is built, and you can verify most of it, but no outside firm has audited it.

Common questions

Do these tools upload my files?

No. Every tool on this site runs inside your browser, on your own device. The site has no server code that could receive a file, and its security policy stops pages from sending data to any other website.

How can I check that for myself?

Open your browser's developer tools on a computer (F12 on Windows, Cmd+Option+I on a Mac), go to the Network tab, then use a tool. An upload appears as a POST or PUT request, and you won't see one here. You can also use a tool once, turn off your internet, and use it again.

Has this site been independently audited?

No, not yet. What we describe here is how the site is built, and you can check most of it in your own browser, but no outside firm has audited it.

Are my files safe on my own computer?

That part depends on your device. Browser extensions can read what's on any page, and malware can read your files. For very sensitive documents, use a browser profile with no extensions.