Product principle
Privacy is an implementation property
Supported local tools process files in the browser and are covered by automated egress tests.
- No file upload, ads or external processing scripts inside active workspaces. Public-site analytics does not receive document bytes.
- Every tool publishes its processing mode before file selection.
- Outputs are new files; source documents are never overwritten.