Privacy & architecture

Everything runs in your browser

Formatting, validation, minification, conversion, tree building, and JSON Schema validation all execute as JavaScript in your browser tab. For large documents, the work is moved to a Web Worker — still on your device — so the interface stays responsive. At no point is your document sent to a server.

What we never do

• We never transmit your document contents to any API.
• We never log or store your documents.
• We never include document contents in analytics or error reports.
• We never persist your content unless you explicitly opt in to saving it.

What is stored locally

Only UI preferences — your theme choice and formatting options such as indentation — are saved, and only in your browser’s local storage. These never contain document contents and never leave your device.

Uploaded files are treated as untrusted

Files you upload or drag in are read as text only, restricted to expected extensions, and capped at a configurable size limit to protect your browser’s memory. They are never executed.

Server routes

The application includes server routes only for future functionality such as a health check, payments, or optional encrypted sharing. Document contents are never sent through these routes during normal formatting, validation, or conversion.

Content Security Policy

A Content Security Policy restricts network connections to the same origin, so the page cannot exfiltrate your data even accidentally. Web Workers run from bundled code only.

Offline use

After your first visit, the app can be installed and used offline. Your documents are never cached by the service worker.