Privacy Policy

Last updated: March 2026
The short version: ZeroEgress does not collect, store, transmit, or process any user data. Your documents never leave your browser. We have no servers, no database, no analytics, and no cookies. There is nothing to disclose because there is nothing to collect.

What data we collect

None. ZeroEgress runs entirely in your browser. All document processing — including AI inference, encryption, and redaction — happens locally on your device. No data is sent to any server during processing.

Cookies

ZeroEgress does not set any cookies. No first-party cookies, no third-party cookies, no tracking cookies.

Analytics and tracking

ZeroEgress does not use Google Analytics, Cloudflare Analytics, or any other analytics or tracking service. We do not track page views, sessions, clicks, or any user behavior.

AI model

The NER (Named Entity Recognition) model is downloaded once from Hugging Face to your browser and cached locally. After the initial download, the model runs entirely offline within the browser. No document content is sent to Hugging Face or any other third party.

Hosting

ZeroEgress is hosted on Cloudflare Pages as static files. Cloudflare may process standard HTTP metadata (IP addresses, request headers) as part of serving the page. This is standard web hosting infrastructure. Cloudflare's privacy policy applies to this infrastructure layer. No application-level data is collected or transmitted.

Data processing agreement

No DPA is required. ZeroEgress does not process any user data on any server. There is no data processor relationship because there is no data processing.

Verification

You can verify the zero-egress claim yourself: open your browser's DevTools, go to the Network tab, and process a document. You will see zero outbound requests containing document data during processing.

Children's privacy

ZeroEgress does not collect personal information from anyone, including children under 13.

Changes to this policy

If we ever change this policy, we will update the date at the top of this page. Given that our architecture collects no data, material changes are unlikely.

Contact

For questions about this policy, contact .