1.0 KiB
Privacy and security model
Merge records and images stay in browser memory and are only serialized when the user explicitly exports. The application performs no telemetry, upload, remote font loading or network lookup. Barcode payload URLs are encoded as data inside the symbol; they are never requested.
CSV/JSON structure, field lengths, record counts, image bytes/pixels, grid dimensions, calibration and output pages are bounded. Object URLs are revoked. User strings are normalized for label display and XML-escaped. Imported templates use a bounded, declarative v1 schema with no script or remote-resource field, and only locally decoded PNG/JPEG/WebP is embedded.
Printing crosses a physical boundary the browser cannot verify: installed font metrics, device drivers, page scaling, feed skew and stock tolerances. Use the calibration controls and test on plain paper. PDF uses vector geometry and embedded standard fonts, but it does not preserve the selected system-font metrics or provide archival guarantees.