Privacy starts with
knowing what happens.
Offline Document Redactor is being built for local document review and redaction. These notes distinguish this website from the desktop application and explain the scope of the first release.
This website
This website does not accept or process your documents. The demonstration uses fictional text already included in the page. It runs locally in your browser.
Website analytics are described below. We do not add advertising trackers. The waitlist is an embedded form provided by Brevo, a separate service. Loading that form contacts Brevo, which receives technical information such as your IP address and browser details and may use cookies or similar technologies under its own privacy policy.
The production website is hosted on Cloudflare. Cloudflare may process ordinary request information, including your IP address, requested URL and browser details, to serve and protect the site. See Cloudflare’s privacy policy.
Website analytics
Website analytics start automatically unless you have opted out or your browser sends a privacy signal. We use PostHog’s US-hosted service to measure page visits and referring sites. We do not track clicks, scrolling, video engagement or other page interactions. A random visitor identifier is stored in your browser’s local storage so visits can be counted across pages. Visitors who opt out, send privacy signals or block analytics are not counted.
Session recording and automatic form capture are disabled. We do not send signup email addresses, form values or document contents to PostHog. URL query strings and fragments are removed from analytics events. IP-based location enrichment is disabled; PostHog still receives network request information when your browser connects to it. See PostHog’s privacy policy.
Global Privacy Control and Do Not Track signals keep analytics off. Previous declines stored in this browser are also honored. These controls do not erase events already sent. The website and signup form work without analytics.
The Brevo form is separate: we do not track its field entries or infer successful signup from a click. The desktop app is also separate and is not instrumented by this website script.
Email waitlist
If you sign up, your email address and subscription status are stored in Brevo for Offline Document Redactor launch notifications. Brevo also handles form validation and any confirmation email configured for the form. No document contents are requested or sent with the signup.
You can unsubscribe using the link in our emails. Brevo may retain subscription or suppression records to respect that choice. For details about the provider’s processing, see Brevo’s privacy policy. Signing up is optional and requires an internet connection; this is separate from the desktop app’s offline document processing.
The desktop workflow
The application is designed to process documents on your computer. It does not automatically send the original or the redacted copy to an AI service. Initial installation, model setup and deliberate software updates may require downloads. Exact offline setup requirements will be provided with each release.
The workflow preserves the original and produces a separate copy. You remain responsible for reviewing the result, controlling any retained mappings or custom values, and deciding whether sharing is appropriate.
Redaction is not a guarantee of anonymity
Detection can miss sensitive text. Details such as unusual transactions, amounts, dates or relationships may identify a person even after direct identifiers are removed. Pseudonyms preserve relationships; they do not establish anonymity.
File structures matter too. Scans, hidden content, protected files and embedded objects require specific support and checks. Do not interpret an empty list of findings as proof that a document contains no sensitive information. The product does not replace professional judgment or establish regulatory compliance.
Release status and scope
macOS and Windows are the first release targets; Linux is planned later. Public installers are not linked yet. Tested format coverage, system requirements, setup instructions, license terms and pricing will be published with the releases.
The initial scope focuses on English-language text-based PDF, ordinary DOCX and UTF-8 TXT or pasted text. This is a deliberate document workflow, not a browser upload interceptor or systemwide data-loss-prevention service.
Before you download or share
- Read the release’s supported formats and operating-system requirements.
- Review the full exported copy, including anything marked unresolved.
- Keep original documents and any original-to-placeholder mappings separate from the copy you share.
- Decide whether the intended destination and use are appropriate for the information that remains.