Skip to content
Ghostchars

Privacy

The short version: your text never leaves your browser, because there is no server to send it to. Analytics are optional and off until you say otherwise.

Last updated

What happens to the text you paste

Nothing you paste, type or drop onto this site is transmitted anywhere. The cleaning engine, the document reader and the prose report are JavaScript running on your device, and this site is a set of static files with no upload endpoint and no server-side processing of any kind. You can put your browser into aeroplane mode and every tool here still works. Nothing is stored between page loads either: reload the page and the text is gone.

Analytics

If — and only if — you accept the banner, we count page views and a small number of product events through PostHog, hosted in the EU and proxied through this domain so that no request goes to a third-party host from your browser. The events are: a text was cleaned, a text was revealed, a document was cleaned, a prose report was run, a result was copied. Each carries counts and which options were on. None of them carries any part of your text, any finding, any filename or any file content — the payloads are validated against a fixed schema before they are sent, and a field that is not in the schema is rejected rather than forwarded. Session recording, autocapture and heat maps are switched off in code. If your browser sends a Do Not Track signal, nothing is loaded at all, whatever the banner says.

Cookies and local storage

Before you make any choice, this site stores nothing. Your theme preference (light, dark or system) is kept in local storage so the page does not flash the wrong colours on the next visit. Your answer to the consent banner is kept in local storage so you are not asked twice. If you accept analytics, PostHog stores an anonymous identifier in local storage and a cookie; rejecting or later withdrawing consent stops it being created or used. There is no advertising, no advertising cookie and no cross-site tracker on this site.

Hosting and server logs

The site is served from our own server. Like every web server, it writes an access log of the requests it answers — the requesting IP address, the time, the URL, the response status and the browser’s user-agent string. That log is what makes it possible to notice an outage or an attack. It contains no text you pasted, because the text is never sent. Logs are kept only as long as they are useful for operations and security.

Your rights

There is no account, no profile and no email address on file, so for most purposes there is nothing about you to access, correct or export. You can withdraw analytics consent at any time by rejecting the banner or clearing this site’s local storage; that stops collection immediately. If you believe we hold personal data about you and want it removed, get in touch through the repository linked below and it will be dealt with.

Changes to this policy

If this policy changes in a way that matters — a new processor, a new category of data — the date at the top changes with it and the change is visible in the public repository history, because this page is a file in that repository.

Contact

Questions about this policy, or about anything on this site, are best raised as an issue in the public repository. That keeps the question and the answer where the next person can find them.