01.Local In-Browser Processing (No Server Uploads)
MiniFolio is architected from the ground up using modern client-side standards: WebAssembly (WASM), HTML5 Canvas, WebCodecs, and Web Workers. When you drag and drop photos or videos into the app, all compression, resizing, and format conversion occurs purely in your device’s volatile memory (RAM).
At no point during optimization does any file leave your browser sandbox or traverse any network connection to our servers. Because your files never reach our systems, server-side data leaks, unauthorized access, and third-party snooping are physically impossible.
02.Client-Side Machine Learning Safety Screening
To maintain acceptable use standards without compromising user confidentiality, MiniFolio utilizes client-side machine learning (TensorFlow.js MobileNet) for automated screening:
- Local Execution: The screening model runs entirely inside your browser sandbox via WebGL or CPU threads. No image frames, previews, or prediction embeddings are transmitted to any server.
- Automated Rejection: Files flagged by the on-device model as explicit or prohibited are immediately halted from processing and cleared from volatile memory.
03.Prohibited Content & User Responsibility
Because MiniFolio executes locally with zero server storage, you retain sole and exclusive legal liability for all content selected or processed on your hardware.
04.End-to-End Filename Encryption
When authenticated users download optimized files, minimal statistics (byte counts and file extensions) are logged to track the 50 MB free quota or Pro status.
To protect confidential file names, all file titles are encrypted on the server using AES-256-GCM authenticated encryption before storage. Your personal or corporate file titles are never exposed in plaintext in any database records or analytics tables.
05.Information We Collect & Why
06.Global Regulatory Compliance (GDPR & CCPA)
By minimizing data collection and refusing to ingest files, MiniFolio satisfies privacy-by-design under the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).
- Right to Access & Erasure: You can view all metrics in your dashboard or request complete account deletion at any time.
- No Data Brokering: We do not sell, rent, or monetize personal data or usage patterns.
07.Contact & Data Requests
For privacy inquiries, questions about our zero-upload architecture, or deletion requests, contact our team at sam.de.721166@gmail.com.