Security model

Every tool runs inside the tab's sandbox — the same isolation model that stops a web page from reading your hard drive. The code can only touch the specific file you hand it through the file picker or a drag-and-drop, and only for as long as the tab is open.

There is no upload endpoint, no object storage bucket and no processing queue holding customer documents. A breach of the website's hosting would expose the website, not your files, because your files were never there.

The password protection tool applies AES-256 encryption to the document, generated in the page from the password you type. Because the key never leaves your device, nobody — including us — can recover the document if you lose the password. Store it somewhere safe before you close the tab.

A browser tab has a finite memory budget, typically a few gigabytes. Very large documents or hundreds of high-resolution pages can exhaust it, and the browser will stop the operation rather than crash your machine. Working in smaller batches is the reliable fix.

If you find a flaw in how a tool handles a document, please report it with the steps to reproduce. Never send us the affected file — describe it instead; we do not want a copy.