Legal & privacy
Security and file handling
Last updated: October 19, 2026
The short version: your files stay on your device, and the only server requests are two text lookups. The details are below.
Files stay on your device
Every tool marked as browser-based runs inside your browser. The file you select is read locally, processed locally and saved locally. It is never transmitted to Zashify.
The two server-side lookups
The email domain check asks our server whether a domain publishes mail servers, and the MX lookup returns those records. Both accept typed text only: an email address or a domain name. No current tool uploads a file.
Transport and headers
The site is served over HTTPS. Responses include X-Content-Type-Options: nosniff, X-Frame-Options: DENY, a strict Referrer-Policy, and a Permissions-Policy that disables camera, microphone, geolocation, payment and USB access.
What we store
There are no user accounts, no uploaded file storage and no lookup history in the application. Our hosting provider keeps standard access logs for security.
Infrastructure
Zashify runs on managed hosting behind a CDN. Access to production systems is limited to the operators, and dependencies are kept up to date.
Reporting a vulnerability
If you believe you have found a security issue, please email us before disclosing it publicly. Include enough detail to reproduce the problem and give us a reasonable chance to fix it.
Scope of this page
This page describes the current build. When accounts or paid plans are introduced, it will be updated with the additional measures that come with them.