Your files. Only yours.

Image processing

Images you select or paste are read, previewed and processed in your browser. They are not sent to our server. In-memory images and results are released when the page closes; downloaded files remain on your device.

JSON processing

Pasted or imported JSON is parsed in memory on this page. It is never uploaded or saved to local storage. Analytics exclude document content, keys, values, search terms and raw error messages. Results are saved to your device only when you copy or download them.

PDF processing

PDF 文件在浏览器本地解析与压缩，不上传、不保存到本地存储，文件名与文档内容不进入统计。Structure optimization会按你选择的质量重编码支持的 JPEG 图片；扫描件模式会把页面转换为图片，文字、交互功能与签名可能丢失；原始文件不被覆盖。

Local preferences

Your chosen language (miao-language) and theme (miao-theme) are stored in localStorage, without images, passwords or admin tokens. Preferences remain until you or your browser delete them.

Tool libraries are deployed with the website, without third-party CDN loading.

Feedback data

Submitting feedback sends the type, related tool, message, optional contact and interface language to the independent API. Only the administrator can read it. Do not submit sensitive information. To request deletion, send a feedback message with the reference number and your request.

The feedback service also uses a session cookie for CSRF protection when submitting messages. This cookie provides security and is not used for tracking.

The admin area uses an HttpOnly session cookie and CSRF protection for authentication, not advertising or tracking. It is invalidated at sign-out or session expiry.

Share

Shared links and QR posters contain a website or tool link, never your imported files. Social sharing opens third-party services governed by their own privacy policies.

Anonymous analytics

First-party traffic and tool usage analytics are enabled by default without a consent popup. The browser stores a random visitor ID (miao-visitor, 90 days) and session ID (miao-session, renewed after 30 minutes of inactivity). We record public page paths, interface language, referring hostname, browser and device categories, time, tool outcomes and duration, download and share actions. Admin pages are excluded.

The server stores masked IPs. Country is read only from a trusted gateway; local development shows Local. Images, filenames, form contents, contact details, passwords and URL query parameters are excluded. Raw events are automatically limited to the last 90 days and are visible only to the signed-in administrator.

Website requests

The website is hosted on Cloudflare Pages. Feedback and analytics run on Cloudflare Workers, with data stored in Cloudflare D1. Hosting and network services receive IP, path and browser information required for normal requests. No advertising or third-party analytics scripts are included.

Supported files

This version supports static JPG, PNG and WebP. Processing limits depend on memory and browser Canvas limits. Animation, HEIC, SVG and OCR are not supported.