Data Handling & Security Overview
A one-page summary for security, IT and compliance review. It describes exactly how Barecopy processes files and what does and does not leave the user's device.
How processing works
Barecopy is a static web page containing JavaScript. When a user selects a file, the file is read into the browser's memory and processed on the device using in-page code. The cleaned copy is generated locally and offered as a download. At no point is the file, or any part of its contents, sent over the network.
Because processing is entirely client-side, the application continues to function with no network connection after the page has loaded — a property that can be verified by disconnecting from the internet and cleaning a file.
What data leaves the device
| Data | Leaves the device? |
|---|---|
| File contents (documents, images) | No. Processed only in-browser; never transmitted. |
| Removed metadata values | No. Displayed locally; never transmitted. |
| Verification report (Pro) | No. Generated in-browser; downloaded directly by the user. |
| Pro licence key | Yes — sent only to the payment provider (Polar) to confirm subscription status. No file data accompanies it. |
Storage & retention
- Files: not stored anywhere. They exist only in the browser tab's memory during processing and are discarded when the tab is closed.
- Server-side: there is no application server that receives files, so there is nothing to retain, log or breach.
- Local browser storage: for Pro users, only the licence key and activation state are stored in the browser's local storage, on the user's own device.
Tracking & third parties
Barecopy sets no advertising or analytics cookies and runs no user-tracking scripts. Payment and subscription management are handled by Polar Software Inc. as merchant of record; card details are provided to Polar, never to Barecopy.
Independent verification
These claims are directly testable by your own technical staff:
2. Load barecopy.com and clean a test file.
3. Observe that no request carrying file data is sent.
4. Optionally, disconnect from the network and confirm the tool still works.
Scope & limitations
Barecopy removes file metadata. It deliberately does not alter document content such as tracked changes or comments; it detects and warns about these instead, leaving the decision to the user. Password-protected PDFs are refused rather than risk corruption. Users are advised to review cleaned files before distribution.
For questions from a security or compliance team, contact support@barecopy.com.