01The short version
WorkCraft is an independent open-source community project initiated and maintained by visoire. There are three places where data can reside, and this policy explains each one:
- On your device. Local document data, spreadsheet formulas, presentation slides, code files, and PDF content remain strictly on your device and are never sent to external servers by WorkCraft. All parsing, evaluation, and rendering take place locally.
- At an optional AI provider you choose. Only if you deliberately add your own API key in WorkCraft and submit a prompt, chat, or automated MCP action to a cloud model.
- On this website. Only information you deliberately submit: a contact message, support chat, account details, or release news subscription.
This website loads no tracking cookies, advertising trackers, analytics scripts, or third-party CDNs. All assets are self-hosted locally.
02What stays on your device
WordCraft, GridCraft, DeckCraft, and PdfCraft are independent WebAssembly engines running inside your browser sandbox. When you launch one from this website or run native portable builds, the code executes client-side. Your files are opened directly from your file system via the browser's native file picker and saved directly back to your disk. They are never transmitted to this website or any external server.
WorkCraft runs locally on your computer: the frontend interface in your browser and a companion Node.js server that listens strictly on the loopback address 127.0.0.1. The following remain entirely on your computer:
- Local document data: Word documents, spreadsheet formulas, presentation slides, code files, and PDF content in
~/WorkCraft/projects/; - Chats, project memory, search indexes, snapshots, and the local trash folder;
- Settings and provider API keys in
~/WorkCraft/config.json; - Token consumption metrics, local logs, and the audit log in
~/WorkCraft/audit.jsonl; - Prompts, context, and responses processed by local Ollama models on your machine or home network.
On iPadOS in standalone browser mode, all project files and caches reside strictly in local browser IndexedDB storage on that iPad. WorkCraft does not transmit telemetry or document contents to any external entity.
03Cloud AI with your own key
WorkCraft supports optional cloud AI providers: Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), DeepSeek, or custom OpenAI-compatible endpoints. Cloud connectivity is strictly optional and requires you to supply your own API key.
Optional third-party AI providers (Anthropic, OpenAI, Google, DeepSeek) process only data explicitly submitted by the user through their configured API keys. When you submit a prompt, the request transmits directly from your computer to the chosen provider's API. Requests do not transit WorkCraft servers or proxies, and WorkCraft never inspects or logs your transmissions.
The third-party provider receives only the conversation turns, files you explicitly attach or reference via @ mentions, tool call parameters, and relevant project context generated for that specific query. Data processing by external providers is governed strictly by the respective provider's terms of service and privacy policy.
- Secure Key Storage: On desktop systems, API keys are retained exclusively by the local companion server in
~/WorkCraft/config.json(with file permissions 0600 on Unix systems) outside the reach of client-side web scripts. On iPadOS browser mode, keys reside in volatile memory unless you explicitly elect to retain them in encrypted browser storage. - Transparent Audit Log: The local audit log (
~/WorkCraft/audit.jsonl) logs metadata for every outgoing request (target endpoint, model identifier, payload size, timestamp, and attached filenames—never document contents). - Local-Only Mode: Activating Local-Only Mode under Settings → Privacy completely severs external outbound network connections to cloud AI endpoints, restricting workflows to local Ollama models and offline tools.
04Contact form and release news
When you use the contact page, we store your name, email address, topic, the apps you picked, your message and the page you sent it from, so we can reply and keep the conversation in one place. If a team inbox is set up, the message is also forwarded there by email. If you sign up for release news, we store your email address, your interests and an optional note, and use them only to write when a milestone is ready.
Forms are protected by a small calculation your browser solves in the background, checked on our own server. No captcha service is involved. For spam and abuse limits we keep a salted one-way hash of your IP address, never the address itself.
05Website chat and assistant
This applies to the chat in the corner of this website, not to the chat inside WorkCraft. Website chats are stored on our server so a person can read and answer them, and a copy is kept in your browser so you can come back to them. A random code in your browser's local storage links the browser to its chats. Files you send in the chat are checked and stored outside the public website, and only you and the team can open them.
Answers come from WorkCraft's own help content. If AI answers are turned on, the messages of the current conversation are also sent to Anthropic to write the reply. Each browser and account has a daily limit for AI answers.
You can delete one conversation or your whole chat history from the chat menu at any time. Chats without activity are deleted after 12 months.
06Accounts, portal and dashboard
Accounts are by invitation and are only needed for the portal and the dashboard, never for the apps or WorkCraft. For an account we store your name, email address, an optional photo, your role, your conversations, notifications and settings. Passwords are stored only as Argon2id hashes. To protect your account we keep a short sign-in history (time, event, device description and a salted hash of the IP address).
07Emails
We send emails from a no-reply address: a confirmation when you contact us, replies from the team when you are not on the site, invitations, release news you signed up for, and codes for sign-in, password resets, email changes and account deletion. Codes are stored only as hashes and expire after 10 minutes.
08Cookies and browser storage
There are no tracking or advertising cookies, so there is no cookie banner. This website only uses what a feature you choose needs:
- oc_portal (cookie): keeps you signed in after you confirm the emailed code. HttpOnly, SameSite=Strict, Secure on HTTPS. Removed when you sign out; it lasts at most 7 days.
- oc_home_theme (cookie) and oc-home-theme (local storage): your light, dark or system choice for this website. Kept for one year.
- oc-visitor (local storage): the random code that links this browser to its website chats.
- oc-assistant (local storage): a copy of your website chats and chat settings such as sounds.
- oc-me (local storage): your name and photo for the page header while you are signed in.
WorkCraft keeps its own settings, such as its light or dark choice and its language, in the browser on your computer. They are never sent to this website.
09Security and retention
All database queries use prepared statements, sessions are random tokens stored only as hashes, and uploads live outside the public website. We keep messages and accounts as long as they are needed for the conversation or until you delete them. We do not sell personal data and share it only with services that run the site for us, such as hosting, email delivery and, when AI answers are on, Anthropic for the website assistant.
10Your rights and contact
You can request a copy of your stored website data, correction, or deletion at any time. If you have an account, Settings in your dashboard provides automated data export and account deletion. Without an account, write to us through the contact page, email [email protected], or submit an issue via github.com/visoire. Document data in WorkCraft remains entirely on your own computer, where you control it directly (Settings → Privacy provides a one-click local wipe). For full legal terms, statutory disclaimers, and IP/DMCA notifications, consult docs/LEGAL.md.