Privacy & Technical Guarantees
Your data never leaves your device.
Last updated: August 2026
Parsing happens in RAM
Files are read with the browser File API and parsed with JSON.parse and JSZip. ZIP archives are decompressed inside your browser heap — a 500 MB export never touches a server, a disk, or a network cable.
Background threads, your CPU
Statistics, search and scanning run on a Web Worker. Worker memory belongs to your tab, not to any service. The main thread stays responsive even on multi-gigabyte archives.
Zero network calls
The analyzer performs no fetch, no XHR, no beacon, no WebSocket. It even works with the network disconnected after page load. There is nothing to intercept, log, fingerprint or sell.
No account, no cookies
There is no sign-in, no API key, no functional or tracking cookie on the analyzer. Downloads are generated as Blob URLs and saved directly from your browser.
Browser sandboxing
The page runs under the browser’s same-origin and script sandbox. JavaScript has no access to other tabs, your clipboard beyond paste, or your local filesystem beyond the files you explicitly select.
Volatile by design
Nothing is written to local storage, session storage or IndexedDB. Conversation data exists only in heap memory; close the tab and it is gone permanently.
The browser security model, briefly
Browsers are deliberately hostile to untrusted pages. Scripts run inside a per-origin
sandbox: they cannot read your filesystem, keylog other apps, or access other tabs.
The only way this page touches your data is the File object
you hand it, and even then it receives a handle, not a path. That is a hard guarantee of the
web platform itself.
Because we never register service workers, never set cookies, and never write to persistent storage, there is no residue to clean up. Your conversation history exists for the duration of the parse, is held in a worker's heap, and is garbage-collected when the tab closes.
Hosting is static on Cloudflare Pages with strict security headers — X-Frame-Options: DENY, X-Content-Type-Options: nosniff, and a locked-down
permissions policy. The marketing pages carry no third-party scripts; the analyzer ships no
analytics at all.
FAQ — privacy
Can you see my files?
No. Files are read by your browser, parsed by your CPU, and held in your RAM. The hosting network carries a static HTML/JS bundle and nothing else.
Does it work offline?
Yes. Once the page has loaded, parsing, scanning, search and export all run locally. Disconnect your network and it still works.
Is this affiliated with OpenAI or Anthropic?
No. This is an independent tool from UtilityBox. ChatGPT and Claude are trademarks of their respective owners.
What about attachments inside my export?
Anything bundled in the archive — images, PDFs, artifacts — stays on your device. We only decompress and index the JSON conversation data.
Questions about this policy? Email support@utilitybox.app .