How We Process Your Files — Privacy & Architecture

Tier 1

Client-Side Execution (Runs in Your Browser)

Over 95% of utilities on FreeDailyTools execute 100% locally within your device's web browser using modern Web APIs. When using developer formatters, text tools, image converters, calculators, or QR generators, your data never leaves your computer or phone.

Client-Side Data Flow

                    [ Your File / Text Input ]

                        ↓ (Local FileReader API / Canvas / WebAssembly)

                    [ Device RAM & GPU Processing ]

                        ↓ (Instant Conversion — 0 network packets sent)

                    [ Download Rendered Output to Your Device ]

Key Technologies:

HTML5 Canvas & WebGL: Image resizing, compression, cropping, and format conversion executed directly on your graphics hardware.
Web Crypto API (window.crypto): Hardware-backed cryptographically secure pseudo-random number generator (CSPRNG) for password generation and SHA-256/MD5 hashing.
Web Workers & JavaScript V8: Multi-threaded JSON/XML formatting, regex evaluation, and diff computations without UI blocking.

Tier 2

Server-Side Processing (Memory-Only Ephemeral)

A small subset of tools (specifically Merge PDF, Split PDF, and Compress PDF) require specialized PDF object parsing libraries that currently execute on our secure application server. We handle these files under strict memory-only safeguards.

Server-Side Data Flow

                    [ Upload PDF via Encrypted HTTPS / TLS 1.3 ]

                        ↓

                    [ Ephemeral Memory Stream Buffer (Max 50 MB total batch) ]

                        ↓

                    [ In-Memory Processing & Transformation (PdfPig) ]

                        ↓

                    [ Stream Output to User ] → [ Immediate Dispose() & GC in finally block ]

                        ↓

                    ZERO BYTES SAVED TO DISK • ZERO DATABASE RECORDS

Our Server Guarantees:

No Permanent Storage: Uploaded files are never written to physical disk drives, SSDs, object storage (S3), or database servers.
Guaranteed Garbage Collection: Stream objects are enclosed in C# using statements and disposed immediately in finally blocks as soon as the response stream is closed.
No Inspection or Analytics: We never inspect, read, OCR, or catalog the textual or image content of your documents.
Strict Upload Limits: Server requests enforce a maximum payload limit of 50 MB (52,428,800 bytes) and rate limits to prevent denial-of-service abuse.

Security Headers & Infrastructure Protections

Every web response delivered by FreeDailyTools includes strict HTTP security headers:

Content-Security-Policy (CSP)

Restricts script and resource origins to prevent XSS attacks.

X-Content-Type-Options: nosniff

Prevents MIME type sniffing vulnerabilities.

X-Frame-Options: SAMEORIGIN

Protects users from clickjacking attacks.

Strict HTTPS / TLS 1.3

All traffic is fully encrypted in transit with forward secrecy.