We Can't Leak What We Never Collect

The short version

specVIO doesn't have a server to send your data to. Every scan, every redaction, every prompt you paste into the sandbox or leak audit runs entirely inside your browser, on your device. Nothing you type is ever transmitted, logged, or stored anywhere but your own machine.

What we don't do

• [✓]No accounts, no sign-up, no login
• [✓]No cookies
• [✓]No ad trackers, pixels, or third-party analytics
• [✓]No server-side processing of anything you paste or upload
• [✓]No sale or sharing of data — there's no data collected to sell

What actually touches your device

Two things persist locally, and only locally:

• [✓]Custom detection patterns you define in the sandbox are saved to your browser's localStorage, so they're still there next time you visit. This never leaves your device and is never sent to us.
• [✓]Standard web server logs (IP address, requested page, timestamp) are generated by our hosting provider the way they are for any website on the internet. We don't attach these to an identity or use them for tracking.

In-app analytics

The codebase includes an internal event-naming stub (things like "scan completed" or "report exported") used during development. In production, it does nothing — no network request is made, no data leaves your browser. If that ever changes to a real, privacy-respecting collector, this page will be updated first.

External links

This site links out to a small number of external sites (for example, our -vio family and hosting partner). Once you leave specvio.com, that site's own privacy practices apply, not this one.

The desktop app (planned)

specVIO's desktop tool is built local-first by design — sanitization logic runs compiled and offline. When it ships, its specific data handling will be documented here before release.

Changes to this policy

If this policy changes, we'll update the date below. Given the site collects nothing, we don't expect that to happen often.