Security and data handling

Local processing

Text tools run as JavaScript in your tab. Hashing uses the browser's built-in Web Crypto implementation. Image tools read the file with the File API, draw it to a canvas and re-encode it in memory.

You can confirm this yourself: open your browser's network panel, run a tool, and observe that no request carries your input.

What this means for confidential material

Drafts under embargo, screenshots containing customer data and internal API payloads can be processed without leaving your device. If your organisation handles regulated data, confirm the approach with your own security team before relying on it.

Reporting an issue

If you believe you have found a vulnerability in this site, please get in touch through the contact page with the steps to reproduce it. We will confirm receipt and keep you updated while we investigate.