Skip to content
Sticraft

Proof: your files never leave your device

Every Sticraft tool — PDF, image, vector, text — runs entirely inside your browser tab. That is not a privacy policy; it is an architecture. This page lets you verify it.

Try it live

Pick any file below. Your browser will process it (computing its SHA-256 fingerprint) while a PerformanceObserver records every network request made during processing. Expected result: zero.

How this is possible

Traditional file tools upload your document to a server, process it there, and send the result back — which is why they need accounts, size limits and retention policies. Sticraft inverts that model: the processing engines ship to you.

  • WebAssembly engines, self-hosted. The same engine classes the server-based services run — Ghostscript for PDF compression, qpdf for encryption, Tesseract for OCR, MozJPEG/libwebp for images — are compiled to WebAssembly and served from this site's own origin. They execute in your browser's sandbox.
  • No upload endpoint exists. There is no server code that could receive a file: the site is a static/edge-rendered app with no file-accepting API.
  • The browser enforces it. Our Content-Security-Policy pins connect-src to this origin (plus analytics hosts) — the page is technically incapable of sending your file bytes to a third party, even if it wanted to.
  • Offline is the ultimate proof. Visited tool pages keep working with no internet connection at all — a service worker caches the page and its engine on your device. A tool that works in airplane mode cannot be uploading anything.

Verify it yourself

  1. Open any Sticraft tool and press F12 (DevTools) → Network tab.
  2. Process a file. Watch the request list: you will see the page's own assets load once (scripts, the WASM engine) — and no request carrying your file. Filter by "Fetch/XHR" to make it obvious.
  3. For the strongest test: load a tool page, enable airplane mode (or DevTools → Network → Offline), then process your file. It still works — because nothing ever depended on a server.

The only network traffic this site generates is anonymous page analytics — never file contents, names, or metadata. See our privacy policy for details.