Security Architecture

A Browser-Only Processing Design

Garimi's detection, replacement and restoration are all designed to happen inside this browser tab's memory.
The original text and mapping table you paste into the workspace are never sent to or stored on a Garimi server.
Image and PDF files are processed the same way, entirely inside the browser.

1. Static files load

Only static HTML, CSS and JavaScript files are downloaded from Cloudflare Pages over an encrypted connection.
There is no server-side code and no database.

HTTPS · Static Only

2. Browser memory processing

The text you paste is processed only in this tab's memory.
Nothing is written to localStorage, cookies or any other storage.

Memory Only · No Storage

3. No server egress

The original text, detection results, mapping table and AI replies are never put in a request body, a URL, or an analytics event.
The Content Security Policy (CSP) blocks outbound connections outside an allow list (Google domains used for ads and analytics).
Nothing about your work is carried in any outbound request.

No Content Egress

Operated without logging your work

Google Analytics is used to understand visitor traffic.
That said, the original text, mapping table and files you enter in the workspace are never provided to ads or analytics.
Detection, replacement and restoration all finish inside the browser.

  • No original text or mapping table sent to a server
  • Your work is not provided to ads or analytics
  • No sign-up or personal information required

Separate from your web-access information

When you open the page, ordinary access information such as your IP address, request time and browser details may be processed on Cloudflare's network.
However, this is completely separate from the text content you type into the workspace,
and the original text is processed only inside your browser after the page is received.

Ordinary page load
Basic access information needed for hosting
Text processing
100% local to the browser (never sent anywhere)

Worth checking on your own end

  • Browser extensions, your OS clipboard and screen-sharing tools are outside Garimi's trust boundary.
  • A restored result shows the original text again,
    so be careful in settings where someone nearby can see your screen.
  • The data-use policy of whatever outside AI service you paste the replaced text into is separate — check it yourself.
  • Your work is not recoverable after a refresh or closing the tab.
    That's a direct consequence of the no-storage design.