Privacy
Your PDFs stay in this tab.
The documents people redact and compare are contracts, forms and records. Here is exactly what this site does with one, and how you can check without taking our word for it.
What happens to your PDF
You choose a file. Your browser hands its bytes to JavaScript running on this page. The pdf.js library (Mozilla's open-source PDF reader, bundled with the site and not loaded from anywhere else) draws the pages and reads their text. For redaction, our code paints your boxes onto page images and builds the new PDF in memory. For comparison, it diffs the text of the two files. The result is handed to you as a download. At no point is the file or any part of it sent to a server, because the page is not able to send anything.
Why it cannot send anything
Every tool and content page carries a Content-Security-Policy that includes connect-src 'none' and a default of 'none' for everything else. The single exception is the activation page, which holds no documents and may connect only to our license server. Your browser enforces the policy: fetch, XMLHttpRequest, WebSocket, beacons and form posts to other sites are refused. Scripts, styles and the PDF reader may only load from this site itself. There is no analytics script, no advertising tag, no font or script from a CDN, and no error-reporting service.
How to check it yourself
- Open a tool page in Chrome, Edge, Firefox or Safari and open developer tools (F12, or Option+Command+I on a Mac).
- Go to the Network tab and clear it.
- Press "Try a sample document" or "Try sample contracts", or add your own file, then redact or compare and download the result.
- The list stays empty. You will see no requests at all while you work.
- For a harder test, turn on airplane mode after the page has loaded and do it again. It works.
- Or open the Console and run
fetch('https://example.com'). The browser refuses it and names the policy that blocked it.
What is stored in your browser
- Your Pro license (the key and the confirmation from our license server), if you activate Pro, so you do not have to paste it each visit.
It lives in your browser's local storage on this site, and clearing site data removes it. The license key leaves your browser only when you press a button on the activation page or open it with a license more than a month old: it is sent to our license server (and on to Creem) to confirm that it is valid. Nothing else is sent. Your PDFs, their text and the redacted or compared results are held in memory only and disappear when you close or reload the tab.
What the host can see
The site is served as static files. Whoever hosts it can see ordinary web-server information when you load a page, such as your IP address and which page you requested, the same as for any website. That happens when the page loads, before you add a file, and it does not include your files. Pro checkout happens on Creem's own site after you click the Buy button, and is governed by Creem's privacy policy; the tools never see payment details.
Limits of this promise
This protects the file from leaving the page. It cannot protect you from a compromised computer, a malicious browser extension that can read pages you open, or a copy of this site that someone else has altered. Use the real address and process sensitive files on a device you trust. The privacy of a document you share after redacting it depends on whether the redaction was complete, so check it with the verification steps.
Questions: contact@neomorrison.com