Privacy Policy
How Bramhify protects your privacy through engineering, not just legal promises. All computations stay strictly in your browser.
TL;DR — Plain English Summary
You don't need a legal degree to understand our privacy posture. Here are the 4 fundamental pillars that govern Bramhify:
No accounts, no profiling, no tracking scripts, and no advertising networks. We never sell or monetize user data.
Files process inside your browser's RAM via WebAssembly & Canvas. Zero bytes of your documents or media touch any server.
We use zero cookies. Browser storage is used strictly for functional preferences like color theme and language.
Voluntary newsletter subscribers are handled via Buttondown (privacy-first email service; 1-click unsubscribe, no tracking pixels).
Who We Are
Bramhify (bramhify.com) is an independent privacy-first software platform operated by Ajit Vishwakarma, a software engineer and tech educator based in India. This website is built as a static client-side utility hub — it contains no server-side application servers, no user database, and no server-side file intake infrastructure.
Data We Collect
We collect zero personal data from your use of our tools. Specifically:
- No Identifying Information: We do not ask for or collect names, phone numbers, government IDs, physical addresses, or user credentials.
- No File Uploads: When you drag, drop, or select files (PDFs, images, audio, video) in any Bramhify tool, they are read exclusively into your device's memory. No file is ever transmitted over the network to any server.
- Local WASM Processing: Heavy compute tools (such as Audio to Video converter and AI Background Remover) execute locally using
FFmpeg.wasmand ONNX models running directly on your CPU/GPU. - Voluntary Newsletter Subscription: If you voluntarily enter your email address into our footer "Join the Insider List" form or waitlist, your email is processed by Buttondown solely to send occasional product release updates. Buttondown uses zero tracking pixels and provides an immediate 1-click unsubscribe link in every email.
- Server & DDoS Logs: We maintain no backend servers. Cloudflare acts as our edge content delivery network (CDN) and may log coarse IP addresses strictly for rate limiting and DDoS mitigation per Cloudflare's Privacy Policy.
Cookies & Browser Storage
This website sets zero cookies of any kind. No session cookies, no marketing cookies, and no cross-site advertising identifiers.
We use standard HTML5 Web Storage APIs (localStorage and sessionStorage) exclusively to store client-side UI state. Below is an exhaustive audit of every key stored by Bramhify:
| Storage Key | API Type | Purpose & Description | Personal Data? |
|---|---|---|---|
theme | localStorage | Remembers your selected visual scheme ("light" or "dark"). | None |
lang | localStorage | Remembers your language preference ("en" or "hi"). | None |
bramhifySidebarPinned | localStorage | Remembers whether the tool navigation sidebar is pinned or collapsed on desktop. | None |
pwa-fab-dismissed-until | localStorage | Timestamp recording when you last dismissed the PWA install prompt, muting it for 7 days. | None |
utlsSidebarScroll | sessionStorage | Preserves sidebar scroll position between clicks so you do not lose your spot. Cleared when tab closes. | None |
bramhify-speed-history | sessionStorage | Temporarily holds up to 5 anonymous speed test metrics in the Network Speed Checker. Cleared when tab closes. | None |
Inspection & Control: You can verify or clear these keys at any moment via your browser's developer tools: F12 → Application → Storage → Local Storage / Session Storage. Because all keys are strictly functional, no intrusive cookie banners or consent popups are legally required under GDPR / ePrivacy Directive.
Third-Party Services & CDNs
To deliver high performance without bloated bundles, Bramhify loads open-source libraries from public CDNs. These requests only transmit standard browser HTTP headers (IP address and browser User-Agent) necessary to deliver the static file:
| External Service | Purpose & Scope | Data Transmitted | Privacy Policy |
|---|---|---|---|
| Google Fonts | Loads Plus Jakarta Sans & Inter web typography | IP address, browser User-Agent | |
| jsDelivr CDN | Delivers pdf-lib, browser-image-compression, and vtracer | IP address, browser User-Agent | jsDelivr |
| cdnjs (Cloudflare) | Delivers pdf.js, jszip, and cropper.js | IP address, browser User-Agent | Cloudflare |
| unpkg CDN | Delivers @ffmpeg/core, @imgly/background-removal-data, and html5-qrcode | IP address, browser User-Agent | unpkg |
| esm.sh | Delivers @imgly/background-removal JS module (Background Remover only) | IP address, browser User-Agent | esm.sh |
| Cloudflare Speed Test | Measures network latency, ping, and throughput (Network Speed Checker only) | IP address | Cloudflare |
| ipapi.co | Fetches coarse ISP and city name (Network Speed Checker only) | IP address | ipapi |
| GoatCounter | Anonymous, cookie-free aggregate page view statistics (no IP stored, no cross-site tracking) | Page URL, coarse referrer, device type | GoatCounter |
| Buttondown | Voluntary email newsletter subscription delivery (no tracking pixels, 1-click unsubscribe) | Email (only if voluntarily entered) | Buttondown |
| Cloudflare Pages | Global edge static file caching and DDoS mitigation | Coarse network metadata | Cloudflare |
Instant Icon Architecture (Zero External CDNs for Icons): Unlike many sites that rely on external icon CDNs, Bramhify bundles all Lucide icons locally in /js/icons.js and the QR code generator in /js/vendor/qrcode-generator.min.js. Your browser makes zero external network requests to render UI icons or generate QR codes.
Your File Data — Technical Guarantee
We do not ask you to trust a privacy policy blindly. Bramhify is engineered with client-side isolation guarantees:
- In-Memory File Reading: When a file is uploaded, it is read into an
ArrayBufferorImageDatastructure via the browser's nativeFileReaderAPI. It exists only in your device's active memory. - Browser-Sandbox Execution: PDF manipulation (
pdf-lib), image compression (Canvas/WASM), and video transcoding (FFmpeg.wasm) run strictly within client Web Worker threads. - Zero Network Telemetry: When processing finishes, output files are downloaded via localized in-memory Object URLs (
blob:https://bramhify.com/...). You can disconnect your internet entirely after loading a tool page, and the tool will continue functioning with 100% fidelity.
Legal Compliance
GDPR (EU General Data Protection Regulation)
No personal data is collected or processed during tool usage. There is no requirement for a Data Protection Officer (DPO) or cross-border data transfer safeguards, as our static architecture operates with zero personal data ingress.
CCPA / CPRA (California Consumer Privacy Act)
We do not collect, sell, share, or monetize the personal information of California residents or any other users. No opt-out or "Do Not Sell My Personal Information" link is required.
Indian IT Act & DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023, Bramhify processes zero personal data for tool usage. Because no personal data is collected, no Data Fiduciary liabilities or Data Protection Board reporting obligations apply.
COPPA (Children's Online Privacy Protection Act)
Bramhify does not collect data from any person, including children under 13. There are no user profiles, public chats, or interactive communication channels.
ePrivacy Directive (EU Cookie Law)
Zero tracking cookies are set. Storage of functional UI preferences in localStorage does not track users across websites and is strictly functional under ePrivacy exemptions.
Open Source Libraries
Bramhify's client-side functionality is made possible by extraordinary open-source software libraries. Each library is utilized under its respective permissive license:
Architecture Evolution & Future Services
Bramhify is founded on a Client-First Architecture. Our commitment is that wherever technically feasible, all processing remains sandboxed inside your browser. To ensure total transparency as the platform expands, any future services are governed by three binding principles:
- Client-Side Default: All standard tools (image compressors, PDF utilities, converters, scanners) will permanently remain 100% client-side with zero server transmission.
- Strictly Opt-In Server Compute: If advanced features in the future require server assistance (such as large-scale AI models, heavy GPU rendering, or cloud sync), they will be explicitly labeled upfront with a clear processing disclosure and require your voluntary opt-in before any file leaves your device.
- Ephemeral, Zero-Retention Processing: Any server-assisted processing is engineered as a strictly ephemeral, in-memory pipeline. Files are never written to permanent disk storage, never inspected, never used for AI model training, and are immediately purged from memory upon completion of the task.
If we introduce architectural additions or updates to our privacy framework, this document will be revised immediately with an updated release audit tag.
Contact & Inquiries
For any privacy inquiries, technical audits, or vulnerability disclosures, you can contact the operator directly:
- LinkedIn: Ajit Vishwakarma on LinkedIn
- Support & Community: Visit our Project Support Page to keep Bramhify independent and ad-free.
