# Privacy and security

Data stays in browser memory. Saved query text uses localStorage only. There is
no telemetry, remote schema resolution, query execution endpoint, URL fetch,
`eval` or dynamic function construction. Exports require an explicit action.

DuckDB mode loads the bounded dataset into an in-memory table inside a
disposable worker using same-origin bundled JavaScript and WASM. External access,
extension installation and extension auto-loading are disabled. The app exposes
no database connection or file/network query surface; completion, cancellation
and hard deadlines terminate the worker. The host CSP retains
`connect-src 'self'`, and browser tests fail on third-party requests. Input,
result, memory and time limits are documented in README.