Security · self-audit

Trust, verified

The homepage claims "nothing to install, nothing sent anywhere." Don't take that on faith. This page turns the audit lens on the site itself — every check below runs live in your browser, right now, and shows its evidence.

Running checks…

One disclosed exception. The PII redactor can — only if you click to enable it — lazily download its NER model from cdn.jsdelivr.net and huggingface.co. The model flows in; your text never leaves the tab. That path is excluded from the strict site‑wide CSP and disclosed here rather than hidden.

Related: the status page — the fleet behind this site proving its freshness contracts. ← back