query-tools/docs/PRIVACY-SECURITY.md

Privacy and security

Data stays in browser memory. Saved query text uses localStorage only. There is no telemetry, remote schema resolution, query execution endpoint, URL fetch, eval or dynamic function construction. Exports require an explicit action.

DuckDB mode loads the bounded dataset into an in-memory table inside a disposable worker using same-origin bundled JavaScript and WASM. External access, extension installation and extension auto-loading are disabled. The app exposes no database connection or file/network query surface; completion, cancellation and hard deadlines terminate the worker. The host CSP retains connect-src 'self', and browser tests fail on third-party requests. Input, result, memory and time limits are documented in README.