RedactLocal Privacy Policy

Last Updated: October 14, 2026 · Effective Immediately

      Zero-Upload Guarantee: RedactLocal operates no tracking servers and makes zero telemetry, crash-reporting, or analytics requests. Document contents, filenames, cryptographic hashes, and redaction coordinates never leave your device.
    

1. Core Privacy Principle: 100% Client-Side Processing

Both the RedactLocal Desktop Application and the Free Web Triage Scanner execute entirely inside your local device's memory sandbox:

Desktop Application (macOS & Windows): Operates inside a strict air-gapped container with network connectivity disabled (connect-src 'none'). All PDF byte manipulation occurs on local CPU cores.
Free Web Triage Scanner PWA: Operates entirely inside your browser tab using WebAssembly and local JavaScript. When you drop a document into the scanner, it is loaded into in-memory ArrayBuffers. Zero bytes are transmitted over the network.

2. Document Data Handled

RedactLocal processes document data solely to execute requested redaction, leak triage, and court compliance verification:

Document Content: PDF streams, font character glyph operators, image XObjects, and metadata dictionaries are parsed in memory to eradicate sensitive values.
Redaction Coordinates: Bounding box coordinates and operator indices are stored only in volatile session memory.
Offline License Verification: If you activate an offline license, RedactLocal validates the cryptographic Ed25519 digital signature locally using the Web Crypto API (crypto.subtle.verify). The license key is stored in your local application preferences and is never sent to any activation server.
Waitlist Submissions (Optional): If you voluntarily submit your email for early Founders Club access, that contact information is stored in local browser storage (localStorage) or transmitted only when you explicitly submit the inquiry.

3. Zero Third-Party Trackers

RedactLocal does not embed Google Analytics, tracking cookies, advertising beacons, Meta pixels, or third-party behavioral SDKs.

4. Network Permissions & Offline Cache

Desktop Shell: Enforces a strict Content Security Policy (CSP) blocking external HTTP/HTTPS network calls.
Service Worker (sw.js): Caches static UI assets (HTML, WebAssembly engine, icons) locally on disk so the triage scanner works completely offline in airplane mode.

5. Contact & Verification

To verify our zero-upload claims or inspect our open-source client-side code, visit our public GitHub repository:
https://github.com/mohdashraf010897/redactlocal