Privacy Policy

1. Zero Image Uploads

clean.hexalab operates entirely as a client-side web application. When you drag and drop, paste, or select an image, the file is read into your browser's local memory and processed using pure TypeScript parsers running inside a client-side Web Worker.

No image, thumbnail, binary byte, or metadata string is ever transmitted to hexalab servers, third-party analytics, or cloud processors.

2. Content Security Policy Enforcement

Our privacy model is enforced mathematically via HTTP Content Security Policy (CSP) response headers sent on every request:

connect-src 'self' https://cloudflareinsights.com; img-src 'self' blob: data:; worker-src 'self' blob:;

These browser directives forbid the page from making unauthorized outbound network connections with user data.

3. Cookies and Local Storage

clean.hexalab uses zero tracking cookies and zero advertising cookies in v1. We store only user interface preferences (such as your chosen light/dark theme) in your browser's localStorage. No file names or metadata values are ever written to persistent device storage.

4. Analytics

We use cookieless Cloudflare Web Analytics to measure aggregate site performance and visitor counts. No personal identifiers or IP-linked individual tracking records are retained.

5. Contact

If you have questions regarding this privacy policy, please contact us at privacy@hexalab.app.