The core design principle of Toolaska Quick Differ (https://diff.toolaska.com) is zero data retention:
- 100% In-Browser Execution: All diffing algorithms, syntax parsing, character-level comparison, and file analysis run entirely within the client's web browser using client-side JavaScript APIs.
- Zero Server Uploads: No user-entered source code, text snippets, confidential keys, or uploaded files are sent over the network to any server.
- Zero Database Storage: We do not store, log, or persist user code snippets in any database or remote telemetry pipeline.
If you discover a security vulnerability or potential privacy concern in Toolaska Quick Differ, please report it responsibly so we can address it promptly.
- Email: Send vulnerability reports directly to
info@toolaska.com. - Please do not open public GitHub issues for sensitive security vulnerabilities.
- A clear description of the vulnerability.
- Steps to reproduce or proof of concept.
- Affected browser versions or operating systems.
We take security seriously and appreciate the developer community's efforts in keeping our tools safe.