Short version:
your data stays yours.

What stays in your browser

Stored in localStorage on your device. Never transmitted.

• Your theme preference (light / dark).
• Your document title.
• All document settings (page numbers, TOC, header/footer, layout).
• Your pasted text — only if Auto-save is enabled.

You can clear all of this at any time by clearing your browser’s site data for this domain. Nothing survives a private browsing session.

What is sent to the server

Only when you click Download Word. Nothing is sent while typing.

• The content you asked to convert.
• Your current settings for that conversion.
• A CSRF token that ties the request to your session.

The server normalises, parses, and renders your content into a DOCX file, then hands it back to your browser. The request is not logged beyond transient PHP error logs (which contain only exception messages, never your content).

How long the generated file lives

Generated .docx files are stored on the server briefly so you can download them. They are automatically deleted:

• Whenever any file in the store is downloaded, any file older than 2 hours is removed.
• Files never touched again still age out the next time someone downloads anything.

In practice, a file never lives longer than the next download that follows it. Worst case is bounded by inactivity, not by a fixed retention window.

Third-party services

Loading the app fetches assets from these origins. They may log your IP, like any web request.

• jsDelivr — Bootstrap CSS, Bootstrap Icons, MathJax.
• Google Fonts — Inter and JetBrains Mono.

No user-identifying data is sent to them. The only URLs they see are the static asset paths. Once downloaded, they are cached by your browser.

Contact

Questions or requests about data: reach out via zimist.com.