1. Zero Server-Side File Processing

All PDF parsing, image decoding, canvas rendering, and raster export calculations execute strictly on your device's client-side JavaScript and WebAssembly engine (PDF.js and PDF-Lib).

• No Server Upload: Your documents are never uploaded to any cloud server, Amazon S3, Google Cloud, or third-party storage.
• No Logging: We do not log filenames, document contents, metadata, or redaction coordinates.
• Airplane Mode Proof: You can load SafeRedact, enable Airplane Mode, and perform 100% of the redaction workflow offline.

2. Information We Do NOT Collect

SafeRedact is built on a zero-telemetry principle:

• No Personal Identifiable Information (PII): We do not ask for your name, email, phone number, or payment details.
• No Accounts or Passwords: SafeRedact does not have a user registration system or login database.
• No Document Transmission Trackers: We do not collect, monitor, or transmit any metadata, content, or redaction coordinates from your documents. Any advertising cookies are strictly limited to standard browser display ads as outlined in Section 6.

3. Local Ephemeral Storage & F5 Session Recovery

To prevent work loss if you accidentally refresh your page (F5), SafeRedact saves temporary session state inside your browser's private IndexedDB storage:

• Device-Locked: This session storage exists solely inside your browser sandbox and cannot be accessed by external sites.
• Instant Purge: Clicking "Upload New File" or closing the tab immediately wipes all session records from your browser memory.

4. True Raster Anti-Leak Technology

Traditional PDF editors only draw an overlay rectangle while leaving the underlying text vector intact. Anyone can open such PDFs and delete the black box to view the private data. SafeRedact uses True Raster Flattening (2.0x DPI), which permanently burns blackout masks into the pixel bitmap and re-encodes the file, completely destroying all underlying vector text and OCR glyphs forever.

5. International Compliance & Standards

Because zero personal data is collected, transmitted, or processed by SafeRedact servers, our architecture inherently complies with global privacy legislation:

• GDPR (EU): Complies with Article 25 (Data Protection by Design & Default).
• CCPA / CPRA (California): Zero personal data sale, sharing, or retention.
• PECA (Pakistan Electronic Crimes Act, 2016): Safe for anonymizing Nadra CNIC and personal records before sharing.
• HIPAA & Financial KYC: Safe for sanitizing medical records, account numbers, and utility bills.

6. Cookies & Google AdSense Advertising

SafeRedact itself does not use tracking cookies for document processing. However, to keep this anti-leak studio 100% free for everyone, we use third-party advertising services, including Google AdSense, to display ads when you visit our website.

• Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites across the internet.
• Advertising Cookies: Google's use of advertising cookies enables it and its certified partners to serve relevant ads to users based on their visit to SafeRedact and/or other sites on the internet.
• Personalized Advertising Opt-Out: Users may opt out of personalized advertising at any time by visiting Google Ads Settings.
• Third-Party Ad Network Opt-Out: Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Network Advertising Initiative opt-out page at aboutads.info choices.
• Zero Impact on Document Privacy: Advertising scripts have zero access to your uploaded files, canvas redaction data, or document memory. All file redaction remains strictly sandboxed and 100% client-side in your browser RAM.

7. Contact & Privacy Inquiries

If you have any questions or security feedback regarding SafeRedact's client-side privacy architecture, please contact us at: privacy@saferedactstudio.com.