Privacy Policy

1. General Overview & Architecture

CleanRedact operates on a zero-server principle. Unlike traditional online PDF editors or cloud conversion tools, CleanRedact executes 100% within your local browser sandbox memory using HTML5, WebAssembly, and client-side JavaScript. No document data, images, text layers, or personal identifiers are ever uploaded, transmitted, or stored on our or any third-party servers.

2. Document Handling in Local Browser Memory

When you drag & drop or select a document (PDF, PNG, JPG, or WEBP), it is read directly into your device's memory using the native HTML5 FileReader API as an in-memory ArrayBuffer. Your files are rendered to an HTML5 Canvas for editing. No network request (HTTP POST, WebSocket, or API call) containing your document data is ever dispatched.

3. Optical Character Recognition (OCR) & AI Face Detection

All automated scanning capabilities run entirely on your device:

• OCR Text Detection: Powered by Tesseract.js running inside local browser Web Workers. Word coordinates and text patterns are identified locally in memory.
• Face Detection: Powered by TensorFlow.js BlazeFace running locally via WebGL/Wasm. Biometric contours and facial coordinates remain strictly in memory and are discarded immediately upon redaction.

4. Destructive Redaction & Permanent Anonymization

CleanRedact ensures genuine destructive anonymization. Black boxes and pixelation are mathematically composited into the raw raster image pixels. During export, original vector text layers and invisible EXIF / PDF metadata (GPS locations, camera serials, creation timestamps, author names) are completely stripped.

5. Cookies, Analytics & Third Parties

CleanRedact does not use tracking cookies, does not use persistent local storage for identification, does not use Google Analytics or other telemetry services, and does not serve advertisements.

6. GDPR / DSGVO & Secrecy Compliance

CleanRedact fully complies with Art. 25 (Privacy by Design and by Default) and Art. 32 (Security of Processing) of the EU General Data Protection Regulation (GDPR). Because no transmission of personal data takes place, using CleanRedact does not constitute data processing by a third party, making it safely deployable for confidential legal, medical, banking, and HR documents.

7. Questions & Contact

If you have any questions regarding our client-side architecture or security design, please reach out via privacy@cleanredact.local.