Privacy

The public preview scans and cleans on your device. Scan inputs and cleaned outputs stay in browser memory and are not sent to the Witness hosting service.

Hosting records

Ordinary Caddy and Tailscale request logs may record your IP address, user agent, request time, and requested path. Those request records are separate from the material you scan.

Public preview boundaries

The public artifact has no accounts, cookies, analytics, Studio, provenance registry, or third-party runtime requests. Witness provides no server-side storage for scan material; downloaded files remain wherever your browser saves them.