Policy
Privacy
StillReadable is built so that the interesting data — your files and what they leak — never reaches us. This page lists everything the server does see, and everything it never can.
What this site sees
- Page views, counted without cookies. Vercel Web Analytics records that a page was visited — no cookies, no cross-site identifiers, no profile. Custom events carry event names only, never file contents, file names, or findings.
- At purchase: Lemon Squeezy, and only then. Paying happens on Lemon Squeezy’s own checkout page — they are the merchant of record and handle tax. Lemon Squeezy receives your payment details and email address; this site never sees your card. Your purchase comes with a license key, which the site validates with Lemon Squeezy to unlock Pro.
- When you unlock or restore. Your license key is sent to the server once, validated with Lemon Squeezy, and exchanged for the local token. The key is not stored on our side.
What this site never sees
- Any file you scan or clean. Files are read inside your browser by a Web Worker and never uploaded. There is no endpoint that accepts them.
- Any finding. What your documents leak is computed and shown on your machine, and stays there.
This is enforced, not promised: the Content-Security-Policy sent with every page blocks connections to anything but this site, which you can verify in your browser’s network panel — or by going offline and scanning anyway.
Where your license lives
Your Pro license token is stored in your browser’s localStorage, on your device, and nowhere else. There are no accounts and no database. Clearing your browser data removes the token; your license key from your Lemon Squeezy receipt restores it on any device.
Questions
Email hello@stillreadable.com.