NullID public guide
Privacy Policy
NullID is designed for local browser processing. This policy explains what happens in the app, what can be stored in your browser profile, and where network access is still part of loading and updating the web application.
Local processing
Files, text, passphrases, generated passwords, redaction input, metadata analysis, hashing, and verification operations run in your browser session. NullID has no required backend service for those workflows.
Network delivery
The web application assets must be loaded from nullid.kamranboroomand.ir before use and may be refreshed from that origin. After the service worker caches the runtime shell, supported browsers can reload the root workbench offline.
Browser storage
NullID stores preferences and workflow settings under nullid-prefixed localStorage keys. Some tools retain local drafts or settings such as selected modules, theme, locale, layout, sanitize policies, redaction settings, password generator settings, and hash batch input.
Secure Notes and WebAuthn
Secure Notes stores encrypted vault records in IndexedDB when available, with a generation-backed localStorage fallback in restricted runtimes. Optional local WebAuthn MFA is device-bound and is not a recovery system.
Exports and downloads
User-triggered downloads can contain plaintext, redacted text, encrypted envelopes, metadata-cleaned files, reports, profiles, policy packs, vault snapshots, or workflow packages depending on the tool and choices made.
Analytics, cookies, and third parties
The application does not include analytics, tracking scripts, external fonts, or runtime external API calls. Browser-visible local session markers may be used by the vault; server-side cookies or hosting logs are controlled by the deployment environment, not by a NullID backend.
Deleting local data
Use Wipe local data inside the app to clear managed preferences and, when selected, vault stores. Browser site-data controls can also remove service-worker caches, localStorage, IndexedDB, and installed PWA data for the NullID origin.
Security limitations
Local browser tools cannot protect against compromised devices, malicious browser extensions, operating-system malware, clipboard managers, or someone with access to your unlocked browser profile.
Security contact
Report security issues through the private channels listed in the repository security policy. Do not open public vulnerability reports.