Security
Security here means processing as little as possible, as briefly as possible.
Local-first processing
Browser-side tools never transmit your document. There is no upload to intercept and no copy to delete.
Server-side processing
Encrypted HTTPS transfer, randomised file identifiers, no public listing or guessable URLs, temporary storage only, automatic deletion with a configurable retention window, and an immediate delete option.
Secrets handling
Processing credentials live in server-side environment variables only. They are never included in the browser bundle or shown in the admin interface.
Reporting a vulnerability
Report security issues to security@example.com. Please allow time to remediate before disclosure.