Zero Server Trust Model
Sanitizr is built on a zero-server architecture. Your files never touch a cloud server or external database — regardless of format.
1. No Upload Endpoints
Sanitizr has no backend server or API upload route. All code is served statically to your browser. You can even disconnect your internet after loading the page and the tool will continue working 100% offline.
2. HTML5 Canvas Pixel Re-encoding (Images)
When an image is dropped or pasted, it is decoded by the browser into raw RGBA pixel arrays and redrawn onto an offscreen HTML5 <canvas>. The canvas is then exported as a clean blob. EXIF, XMP, TIFF, and GPS header blocks are fundamentally ignored and not included in the re-encoded binary.
3. FFmpeg WebAssembly (Video & Audio)
Video and audio files are processed using FFmpeg compiled to WebAssembly, running entirely inside your browser tab. Container-level metadata is stripped with -map_metadata -1 and stream data is copied without re-encoding. The WASM binary (~25MB) is loaded once and cached by your browser.
4. pdf-lib In-Browser (PDFs)
PDF files are parsed and modified using pdf-lib, a pure JavaScript library that runs in the browser. The Info dictionary fields (title, author, subject, keywords, creator, producer, and dates) are cleared while document content remains untouched.
5. Zero Analytics & Telemetry
No Google Analytics, no tracking pixels, no telemetry scripts, and no third-party cookies are loaded. Your activity remains private to your device.