Privacy Policy
What data we collect
None. ZeroEgress runs entirely in your browser. All document processing — including AI inference, encryption, and redaction — happens locally on your device. No data is sent to any server during processing.
Cookies
ZeroEgress does not set any cookies. No first-party cookies, no third-party cookies, no tracking cookies.
Analytics and tracking
ZeroEgress does not use Google Analytics, Cloudflare Analytics, or any other analytics or tracking service. We do not track page views, sessions, clicks, or any user behavior.
AI model
The NER (Named Entity Recognition) model is served from ZeroEgress's own origin — not from Hugging Face or any third-party CDN. It is downloaded to your browser once on first load and cached locally. At runtime, ZeroEgress makes no network requests to any third party whatsoever: every asset, including the model, is served from this same origin, and the Content-Security-Policy restricts all connections to 'self'. After the initial download, the model runs entirely offline within the browser. No document content — and no network request of any kind — is ever sent to a third party.
Hosting
ZeroEgress is hosted on Cloudflare Pages as static files. Cloudflare may process standard HTTP metadata (IP addresses, request headers) as part of serving the page. This is standard web hosting infrastructure. Cloudflare's privacy policy applies to this infrastructure layer. No application-level data is collected or transmitted.
Data processing agreement
No DPA is required. ZeroEgress does not process any user data on any server. There is no data processor relationship because there is no data processing.
Verification
You can verify the zero-egress claim yourself: open your browser's DevTools, go to the Network tab, and process a document. You will see zero outbound requests containing document data during processing.
Children's privacy
ZeroEgress does not collect personal information from anyone, including children under 13.
Changes to this policy
If we ever change this policy, we will update the date at the top of this page. Given that our architecture collects no data, material changes are unlikely.