Security & privacy

How we protect your account and your files.

๐Ÿ”’ You are using an encrypted connection (HTTPS). Data sent between your browser and this site cannot be read by others.
๐Ÿ”’
Encrypted in transitThe site is served over HTTPS with HSTS, so everything you upload or download is encrypted between your browser and our server.
๐Ÿ”‘
Safe passwordsPasswords are hashed with bcrypt. We never store or see your real password, and strong passwords (letters + numbers) are required.
๐Ÿ›ก
Bot & brute-force protectionGoogle reCAPTCHA on login, sign-up and password reset. Five wrong sign-ins lock the attempt for 15 minutes and every request is rate-limited.
โœ‰
Verified accountsEvery account must verify its Gmail address before using any tool.
๐Ÿ“
Your files stay privateFiles are stored outside the public web folder, linked to your account only, and can be opened only by you.
๐Ÿ—‘
Automatic deletionUploaded and generated files are deleted automatically after 7 days. You never need to clean up.
๐Ÿงฑ
Hardened browser securityContent-Security-Policy, clickjacking protection, anti-CSRF tokens on every form, secure cookies and strict referrer policy.
๐Ÿ“œ
Activity logSign-ins, failed attempts and password changes are recorded. You can review your recent activity on your profile page.
๐Ÿšซ
No selling, no sharingYour documents are used only to produce your result. We do not sell or share them with advertisers.

Tips to stay safe

  • Use a long, unique password and never share it.
  • Check that the address bar shows https:// and the correct domain before you sign in.
  • Log out (the icon at the top right) when you use a shared computer.
  • If you see a sign-in you do not recognise on your profile page, change your password immediately.