Check for yourself that nothing leaves
A privacy promise is only worth something if it can be checked. This one can be checked in thirty seconds, without taking our word for it.
Three checks
The Network tab
Open your browser's developer tools (F12), Network tab, then drop a file and run a tool. You will see the page's scripts loading, and no request carrying your data.
Airplane mode
Load a tool page, turn off the network, then work. A service that uploads stops dead; here, everything keeps going.
The security policy
View the page source: the
Content-Security-Policytag carriesconnect-src 'self'. The browser refuses any connection from the page to another domain, whatever code it runs.
The content security policy
It is the same on every page of the site, and it is what turns the promise into architecture: default-src 'self', connect-src 'self' blob:, form-action 'none', frame-src 'none', object-src 'none'. No font is loaded from a provider, no script from a CDN, no analytics.
The site's only request
After a save, your browser sends this domain a request containing only a tool family ("workbook" or "data") and a number of files: POST /compte?f=classeur&p=1. Nothing else: no file name, no content, no cookie.
The matching log records only a date, the family and that number: no IP address, no user agent, no referrer. A browser that asks not to be tracked (Global Privacy Control, Do Not Track) sends nothing, and a failed send is silent: it never prevents a save.
And the GDPR
Klargrid processes none of the personal data in your files: it never receives them. So there is no processor to declare, no transfer outside the European Union, no data processing agreement to sign, no retention period to set. For a DPO, that settles it: the tool is not part of the processing.
What we do not guarantee
- Your browser and its extensions. An extension allowed to read pages can read what they show, here as anywhere.
- Your machine. Spyware installed on it sees what you see.
- What you do with the output file. Once saved, it is yours: if it then leaves by email, that is beyond our reach.