Nothing is sent, and you can check it

What is downloaded, and from where

When the tool opens, the browser downloads the page, its code and its style sheet. The first time a model runs, it downloads the compute engine and then the files of the chosen model. Everything comes from this site, and nothing else is requested: no font, no third-party script, no analytics.

The library that runs the model (transformers.js) knows how to fetch its files from Hugging Face and its engine from a content delivery network. In Klarword it is not allowed to: its download function is replaced by one that refuses, and it only reads the verified files stored on your computer. An unexpected request fails with a message instead of going out.

What is never sent

Not the audio, not the video, not the transcript, not your corrections, not the names of your files. There is no counter, no usage log, no telemetry. The server does not know you transcribed anything.

This site's server keeps no access log. The hosting provider keeps its own technical logs at machine level, under its security rules.

What is stored on your computer

The models and the engine are stored in the private space the browser keeps for this site (Origin Private File System), after their fingerprint has been checked. This avoids downloading them again, and makes offline work possible. The tool's “On this computer” panel lists them and lets you delete them.

Your recording is never stored there. It is read into memory, in the tab, and forgotten when the tab closes; so is the transcript. That is why the tool asks you to save it.

Only one thing from your work is kept from one visit to the next: the glossary you wrote, in the browser's local storage, on this computer. It does not leave the computer; you export it yourself as a text file to share it.

Recording from the microphone

The tool can record straight from the computer's microphone. The browser asks for your permission first; the sound is then kept in memory in the tab, exactly like a file you had dropped, and transcribed the same way. It is not sent anywhere. If you want to keep it, the tool offers to save it on your computer; otherwise it disappears when the tab closes.

The site's Permissions-Policy header allows the microphone for this site only, and forbids the camera, geolocation and the rest.

Offline mode

A service worker keeps a copy of the tool's pages and code so that it reloads with the network off. It makes no request on its own, queues nothing for later, and only touches this site's files. Pages go to the network first when it is there, so that you always read the content security policy in force.

The spell checker

The browser's spell checker is off by default in the editor. The basic one in Chrome, Edge and Firefox works on the computer; but Chrome's “enhanced spell check” sends the typed text to Google. If you turn it on in Klarword, check your browser's setting first.

What this architecture does not guarantee

• An extension installed in your browser can read the page and make its own requests. For sensitive work, use a profile without extensions.
• A compromised computer stays compromised: Klarword does not protect against spyware installed on the machine.
• The browser itself sends information to its publisher (updates, crash reports) according to its own settings.
• The request list shown in the tool is kept by the page. The browser's Network tab is the check that counts.

An independent audit

The code served can be read in the browser, and the self-hosted package is identical to the site's, with its fingerprint. An organisation can therefore have it audited by the provider of its choice, or ask its security officer to review it before approving it. Write to us to receive the package to audit.

The content security policy

Sent by the server with every page, and repeated in the page itself in case it is placed on another server:

default-src 'self';
script-src 'self' 'wasm-unsafe-eval' blob:;
worker-src 'self' blob:;
style-src 'self' 'unsafe-inline';
img-src 'self' blob: data:;
media-src 'self' blob:;
font-src 'self';
connect-src 'self' blob:;
object-src 'none';
frame-src 'none';
base-uri 'none';
form-action 'none'