Security

How We Keep Your Files Safe

The most secure system is one that never sees your data in the first place. That's the principle LoCiFile is built on.

Zero File Uploads

Your files never leave your device. There's no upload button that secretly sends data to a server.

No Account Required

We don't ask for your email, name, or any personal details to use the tools. Nothing to breach.

No Server Storage

We run no file storage infrastructure. There's no database of user documents because none are ever collected.

Processed in Your Browser

All compression, resizing, and conversion runs using JavaScript inside your own browser tab.

The Architecture That Makes This Possible

Most online file tools work by uploading your document to a server, processing it there, and sending the result back. That approach is convenient to build, but it means your files are transmitted over the internet, stored temporarily (sometimes permanently) on someone else's infrastructure, and processed by code you can't inspect.

LoCiFile works differently. Every tool on the site uses browser-native APIs and open-source JavaScript libraries — things like PDF.js for reading PDFs and pdf-lib for creating them — to do all the processing directly on your device. The only thing that travels over the network is the webpage itself when you first load it. After that, your files stay put.

What Happens When You Process a File

Here's exactly what happens when you use a LoCiFile tool, step by step:

1
You select or drag a file into the tool. It's read into your browser's memory — it doesn't go anywhere else.
2
The browser runs the processing logic (compression, resizing, format conversion) locally using JavaScript.
3
The result is generated in memory and made available for you to download.
4
When you close or refresh the tab, the file is cleared from memory. Nothing is retained.

Open Source Libraries We Use

The processing tools LoCiFile relies on are well-established, open-source libraries with large communities and public codebases. You can inspect them yourself:

PDF.js: Mozilla's open-source PDF reader, used to render and read PDF pages in the browser.
pdf-lib: A JavaScript library for creating and modifying PDFs entirely in the browser, with no server dependency.
Canvas API: A built-in browser API used for image processing and resizing. No third-party code involved.

HTTPS Everywhere

The LoCiFile website is served over HTTPS. This means the connection between your browser and our servers is encrypted, so nobody can intercept the page as it loads. It also means your browser will warn you if anything is tampered with in transit.

Contact Form Security

The contact form is the one place where data does leave your device — specifically, the name, email, and message you type. This is routed through Formspree, a trusted form handling service, directly to our Gmail inbox. We don't store form submissions ourselves. Formspree's own security practices are documented at their website.

Found a Security Issue?

If you spot something that looks like a security vulnerability — even if you're not sure — please tell us. We'd rather investigate a false alarm than miss something real. Email us directly and we'll look into it promptly.

Email: locifiletools@gmail.com