Privacy & verifiable guarantees

Works offline. 0 bytes uploaded.

Locache is built so your developer data does not need to touch a server. Tool input, vault data, and cryptographic material stay in your browser unless you explicitly use a network tool.

1. Verifiable zero-knowledge design

  1. No backend database — no user accounts, auth server, or session store for toolkit use.
  2. Local processing — transforms and validations run in your client (JavaScript, WebAssembly, Web Workers where used).
  3. Share links stay off the wire — shared snippets use the URL hash fragment (https://locache.download/#data=…). Browsers do not send the fragment to the origin on HTTP requests.
  4. Lockdown Mode — optional runtime CSP with connect-src 'none' for full network isolation.

2. Analytics

  • No Google Analytics, cookies, or fingerprinting beacons in the product design.
  • On the public site, cookie-less aggregate pageviews (e.g. Plausible) may run on marketing pages only — not on tool, vault, or settings routes.
  • Tool pages, inputs, workspace buffers, and JWT or crypto payloads are not used for analytics.
  • Do Not Track (DNT) and Global Privacy Control (GPC) are honored where supported.

Questions: locache.download@gmail.com