Privacy

Your document never leaves your device.

What is processed where

• The document, PDF, image, audio and video tools read your file into the tab you have open. Everything those tools do with it happens on your device. It is never uploaded, and there is no server that stores a copy.
• The library, notes, quizzes, decks and boards you make are saved to your browser's local storage. They stay on your device, for your browser profile only.
• If a feature uses AI, it uses the AI you configured and chose yourself. That is either an API key for a hosted provider you picked (Google, OpenAI, Anthropic, OpenRouter and similar), which receives the text you give it, or a local model such as Ollama that never leaves your machine. Drazil does not reroute your prompt anywhere else. If you are unsure which is live, check Settings; if nothing is configured, no text is sent anywhere.
• Your AI provider sees the text you give it, for as long as you use it, under that provider's own privacy policy and data retention rules. That is between you and them; Drazil does not see the traffic, keep logs of it, or get a copy.
• Not every hosted provider allows direct browser calls, so requests to those providers pass through Drazil's own CORS relay on Cloudflare Workers (it stores nothing and can only reach the providers listed in Settings). Local models never touch it.

What the site itself talks to

• Cloudflare Web Analytics counts how many visits each page gets, because the site is hosted on Cloudflare Pages and the host injects its own cookieless beacon into every page it serves. It collects nothing that identifies you: no cookies, no fingerprinting, no cross-site tracking, no stored visitor profile. It reports aggregate, anonymous counts (views, broad country, device class) to the host. This was previously undocumented; it is disclosed here so the promise on this page is complete. It cannot be switched off without turning off analytics for the whole host, and Drazil does not read individual rows because there are no individual rows to read.
• The fonts delivered with the site are served from this origin. Some documents ask Drazil to typeset in scripts whose glyphs are not in the base fonts, and in that case only the fonts that document needs are fetched, the first time they are needed (for example Devanagari, or large CJK faces). Those fetches go to a public font CDN (jsdelivr / raw.githubusercontent.com) and ask for exactly the face the document wants; no document content, text or metadata is ever sent.
• When you typeset a LaTeX document, the engine uses the TeX Live 2025 packages that ship with Drazil for the common cases. If a document asks for a package that is not included, Drazil fetches just that package, by name, through its own origin; the origin streams it from the TeX Live archive at ftp.math.utah.edu. The fetch contains only the package name, never your document's contents.

What you can do

Everything Drazil stores for you lives in your browser's local storage. Clear the library, reset the workspace, or wipe the browser's site data, and it is gone. There is no server-side copy to delete, because there is no server-side copy.