MiscDisc Buy us a coffee

Liner notes · How it works

Your files stay on your device

Every tool on this site runs inside your browser. When you open a file, it's read and processed on your device, and the result is saved straight back to it. There's no upload.

How it works

Each tool is a small program, written in Rust and compiled to WebAssembly, that your browser downloads the first time you use it. It runs in the background of the page, on your device's own processor and memory.

Why it can't upload your files

Every page is sent with a security rule called a Content Security Policy (CSP). Your browser enforces it, not us. Its connect-src lists the only servers a page may talk to: this site ('self'), and Google Analytics, which loads only if you accept analytics cookies. form-action 'none' stops it submitting forms. What a tool page sends this site is anonymous usage counts, such as "a PDF was merged", never a file or its name.

Your files are processed in a separate background worker, and nothing in the page sends them anywhere: not to us, and not to Google. If you decline cookies, nothing is loaded from Google at all. More in the FAQ.

The one exception you choose: IACloud

If you sign in and turn on IACloud, Save to IACloud, beside every Download, keeps that file ready on all your devices. Each file is encrypted on your device first, with a key only your devices have, and only the encrypted copy is sent. That happens on the IACloud page and in its invisible helper pages; they're the only pages whose connect-src also lists api.iasoft.dev (IACloud) and auth.iasoft.dev (IASoft sign-in). The tool pages still can't reach either.

Check it yourself

  1. Open your browser's developer tools (F12, or ⌥⌘I on a Mac) and choose the Network tab.
  2. Reload the page and select the first request (the page itself).
  3. Under Response Headers, find Content-Security-Policy and read its connect-src: this site and Google Analytics' addresses, nothing else (on the IACloud page, IACloud's two addresses too).
  4. Now use the tool. The Network tab lists every request the page makes: none of them carries your file.

You can also turn off your connection once the page has loaded: the tools keep working.