Security
Your documents are sensitive. Here is how Inkfolio is built to protect them.
Your files never leave your device
PDFs are opened, edited and saved by code that runs in your browser. They are not uploaded to our servers, so there is no copy for us to lose, leak or be asked to hand over.
How the website is protected
- Delivered only over HTTPS, with HTTP Strict Transport Security.
- A strict Content Security Policy: only our own scripts can run, and pages cannot be embedded in other sites.
- No third-party scripts, trackers, advertising or fonts. Libraries and fonts are served from this website.
- Filenames of scripts and styles include a content hash, so you always receive the code we published.
- Camera, microphone, location and similar browser features are switched off for this site.
What is stored on your device
Recent files, markup, preferences and your signature are kept in your browser’s storage so you can continue later. If you share a computer, remove files with the cross on each card on the home screen, or clear this site’s data in your browser. See the privacy notice.
Report a vulnerability
If you think you have found a security problem, please email [email protected] with the steps to reproduce it. We will acknowledge your report, investigate, and fix confirmed issues. Please give us reasonable time to respond before sharing details publicly, and do not access other people’s data. A machine-readable contact is published at /.well-known/security.txt.