How you can check that files stay on your device

You don't need to trust us. Here is how to check for yourself.

How the page is built

The page

AdsAnalytics

Sealed zone: the tool and your file

Blocked

Internet

The sealed zone is a separate frame on its own domain (reshapefile.app). You pick your file inside it, so this page, its ads and its analytics never see the file.

The exact security policy

Your browser enforces this on the sealed zone. default-src 'none' and connect-src 'self' mean it may load its own code from its own domain and nothing else. It cannot contact any other server.

Content-Security-Policy:
  default-src 'none';
  script-src 'self' 'wasm-unsafe-eval';
  worker-src 'self' blob:;
  connect-src 'self';
  img-src 'self' blob: data:;
  media-src 'self' blob:;
  style-src 'self';
  font-src 'self';
  manifest-src 'self';
  form-action 'none';
  base-uri 'none';
  frame-ancestors https://reshapefile.com;

The frame is also sandboxed: sandbox="allow-scripts allow-same-origin allow-downloads". It cannot open pop-ups, submit forms or take you to another page.

Note: What remains possible: the sealed zone can still contact its own domain to load code. That is why it runs only our own code, with no ads, analytics or third-party scripts inside. Each build publishes the fingerprint of every file it serves at reshapefile.app/hashes.json, so a changed build can be noticed.

The airplane-mode test

Open any tool on this site.
Turn on airplane mode, or unplug your network cable.
Add a file and clean it.
Download the result. It works, because nothing needed the internet.
Turn the network back on. The counter above the tool still shows 0.

What we claim and what we don't

We claim	We don't claim
Your files are processed on your device and never uploaded.	That there is no tracking. This page shows ordinary ads and counts visits.
The tools work offline after your first visit.	That it is impossible for anyone to see your files. Malware or browser extensions on your device are outside our control.
Nothing but our own code runs in the sealed zone: no ads, analytics or third-party scripts.	That cleaning removes what is visible in a picture.
Cleaned files are checked again before you download them.	That we have found every kind of hidden data in every format. Anything we don't recognise is listed, not hidden.