14 lines
767 B
Markdown
14 lines
767 B
Markdown
# Privacy and security
|
|
|
|
Data stays in browser memory. Saved query text uses localStorage only. There is
|
|
no telemetry, remote schema resolution, query execution endpoint, URL fetch,
|
|
`eval` or dynamic function construction. Exports require an explicit action.
|
|
|
|
DuckDB mode loads the bounded dataset into an in-memory table inside a
|
|
disposable worker using same-origin bundled JavaScript and WASM. External access,
|
|
extension installation and extension auto-loading are disabled. The app exposes
|
|
no database connection or file/network query surface; completion, cancellation
|
|
and hard deadlines terminate the worker. The host CSP retains
|
|
`connect-src 'self'`, and browser tests fail on third-party requests. Input,
|
|
result, memory and time limits are documented in README.
|