19 lines
1.0 KiB
Markdown
19 lines
1.0 KiB
Markdown
# Privacy and security model
|
|
|
|
Merge records and images stay in browser memory and are only serialized when
|
|
the user explicitly exports. The application performs no telemetry, upload,
|
|
remote font loading or network lookup. Barcode payload URLs are encoded as data
|
|
inside the symbol; they are never requested.
|
|
|
|
CSV/JSON structure, field lengths, record counts, image bytes/pixels, grid
|
|
dimensions, calibration and output pages are bounded. Object URLs are revoked.
|
|
User strings are normalized for label display and XML-escaped. Imported
|
|
templates use a bounded, declarative v1 schema with no script or remote-resource
|
|
field, and only locally decoded PNG/JPEG/WebP is embedded.
|
|
|
|
Printing crosses a physical boundary the browser cannot verify: installed font
|
|
metrics, device drivers, page scaling, feed skew and stock tolerances. Use the
|
|
calibration controls and test on plain paper. PDF uses vector geometry and
|
|
embedded standard fonts, but it does not preserve the selected system-font
|
|
metrics or provide archival guarantees.
|