Privacy proof for DocNimble browser tools
“Browser processed” means the selected file is transformed by JavaScript in your browser rather than posted to DocNimble's worker job endpoint. It does not mean a web page makes literally zero ordinary network requests for HTML, scripts, styles or icons.
Last reviewed:
How to verify a browser tool
- Open Developer Tools → Network.
- Load the tool page and let ordinary page assets finish.
- Clear the Network list.
- Select a non-confidential test file and run the browser tool.
- Confirm that processing does not POST the selected file to
/app/run/*/submit,/api/*or a third-party file-processing endpoint.
Current client dependency inventory
| Engine | Version | Purpose | Licence | Status |
|---|---|---|---|---|
| pdf-lib | 1.17.1 | PDF assembly, editing and output generation | MIT | Pinned runtime dependency; vendor self-hosting is a recorded hardening action. |
| pdfjs-dist | 4.4.168 | PDF rendering, text extraction and verification | Apache-2.0 | Pinned runtime dependency; vendor self-hosting is a recorded hardening action. |
| qpdf-wasm | 0.3.0 / qpdf 12.2.0 | Known-password PDF encryption, decryption and optimisation in browser WebAssembly | ISC / Apache-2.0 components | Pinned during installation, SHA-384 recorded, then served from this DocNimble origin. No password recovery or cracking. |
Self-hosted engine boundary
DocNimble v3.4 serves browser processing engines from this DocNimble origin after installation. The fresh installer verifies the local vendor manifest before completing. The recorded source URLs are used only by the explicit installer/vendor-repair action; tool execution does not load PDF engines from a third-party CDN. The offline badge appears only after the service worker confirms that the required engine cache is populated.
Server and worker tools
If a tool requires the Worker Core, the interface must say so before submission. Those files deliberately leave the device for protected processing and are governed by job retention and expiring-download controls.
Analytics boundary
Consent-gated analytics may measure page views and tool-completion events. It must not include selected file names, document text or applicant data.