{"schemaVersion":1,"generatedAt":"2026-09-26T16:22:18.023Z","site":"https://toolars.com","receipt":"https://toolars.com/privacy-proof/verification-receipt.json","release":{"revision":"71661d58f0bacb8a","header":"X-Toolars-Release","howToCheck":"Fetch any page on this origin and compare its X-Toolars-Release response header with release.revision below. A mismatch means this receipt describes different bytes than the ones you are being served."},"source":{"commit":"0bd7b34106b302504c812f5099b896c9dc4430f2","commitSource":"vercel","note":"Git commit this deployment was built from."},"verification":{"commands":[{"id":"verifyLocalProcessing","command":"pnpm run verify:local-processing","path":"scripts/verify-local-processing.mjs"},{"id":"auditLocalCore","command":"pnpm run audit:local-core","path":"scripts/audit-local-core.mjs"},{"id":"buildToolWorkers","command":"pnpm run worker:build","path":"scripts/build-tool-workers.mjs"},{"id":"benchmarkTools","command":"node scripts/benchmark-tools.mjs","path":"scripts/benchmark-tools.mjs"},{"id":"capturePrivacyProof","command":"node scripts/capture-privacy-proof.mjs","path":"scripts/capture-privacy-proof.mjs"}],"harness":"scripts/capture-privacy-proof.mjs"},"measurement":{"measuredRevision":"b0d99793af18cdc8","status":"different-release","matchesCurrentRelease":false,"bindingNote":"The release above identifies this receipt's deployment. Measurements belong only to measuredRevision; unbound or different-release measurements do not verify the current deployment.","capturedAt":"2026-09-25","scope":"Headless Chromium against a production standalone build, recording every request (including dedicated Web Worker fetches); service workers blocked, so repeat asset loads are served by the browser's immutable HTTP cache and produce zero recorded requests; Toolars analytics is disabled on local and preview origins; no analytics traffic is expected there, including builds using a synthetic test key.","baseUrl":"http://127.0.0.1:9608","browser":"Chromium 151.0.7922.34 (headless)","node":"v24.19.0","scenarios":[{"id":"image-tool-convert","tool":"image-format-converter","window":"One full conversion plus download, after page and runtime warm-up.","totalRequests":0,"sameOriginRequests":0,"crossOriginRequests":0,"uploadRequests":0,"canaryLeaks":0,"thirdPartyHosts":[]},{"id":"image-tool-heic-convert","tool":"image-format-converter","window":"Second HEIC → JPEG conversion plus download, after the lazy decoder warm-up fetch.","totalRequests":0,"sameOriginRequests":0,"crossOriginRequests":0,"uploadRequests":0,"canaryLeaks":0,"thirdPartyHosts":[]},{"id":"ocr-language-pack","tool":"image-to-text-ocr","window":"Second recognition pass, after the engine and language pack warm-up fetch.","totalRequests":3,"sameOriginRequests":3,"crossOriginRequests":0,"uploadRequests":0,"canaryLeaks":0,"thirdPartyHosts":[]},{"id":"pdf-tool-rotate","tool":"pdf-rotator","window":"Rotate the bundled sample and download the result, after warm-up.","totalRequests":0,"sameOriginRequests":0,"crossOriginRequests":0,"uploadRequests":0,"canaryLeaks":0,"thirdPartyHosts":[]}]},"disclosedExternalHosts":[{"id":"posthogProxy","host":"track.toolars.com","kind":"analytics","reachableFromToolWorkspace":false},{"id":"posthogUi","host":"us.posthog.com","kind":"analytics","reachableFromToolWorkspace":false},{"id":"supabase","host":"project ref .supabase.co (NEXT_PUBLIC_SUPABASE_URL)","kind":"backend","reachableFromToolWorkspace":false},{"id":"githubAvatars","host":"avatars.githubusercontent.com","kind":"avatar-image","reachableFromToolWorkspace":false},{"id":"googleAvatars","host":"lh3.googleusercontent.com","kind":"avatar-image","reachableFromToolWorkspace":false},{"id":"buyMeACoffee","host":"buymeacoffee.com","kind":"outbound-link","reachableFromToolWorkspace":false},{"id":"chromeWebStore","host":"chromewebstore.google.com","kind":"outbound-link","reachableFromToolWorkspace":false},{"id":"googleFonts","host":"fonts.googleapis.com / fonts.gstatic.com","kind":"build-time","reachableFromToolWorkspace":false},{"id":"vercel","host":"vercel.app (hosting platform)","kind":"infrastructure","reachableFromToolWorkspace":false},{"id":"cloudflare","host":"cloudflare.com (DNS + proxy layer)","kind":"infrastructure","reachableFromToolWorkspace":false}],"accessibility":{"observedAt":"2026-09-25","standard":"WCAG 2.1 Level A and AA — automated rules only","tool":"@axe-core/playwright 4.12.1","target":"Chromium against a local production standalone build","spec":"tests/e2e/accessibility.spec.ts","violations":0,"scenarios":[{"id":"homepage","route":"/"},{"id":"search command palette","route":"/"},{"id":"category route","route":"/developer"},{"id":"tool workspace","route":"/tools/qr-code-generator"},{"id":"published Workflow shell","route":"/workflows/image-delivery"},{"id":"published image-delivery workspace","route":"/workflows/image-delivery"},{"id":"published PDF submission workspace","route":"/workflows/pdf-submission"},{"id":"published privacy sanitizer workspace","route":"/workflows/privacy-sanitizer"},{"id":"sign-in route","route":"/sign-in"}],"notProven":["Automated rules catch a subset of WCAG 2.1 A/AA failures. Zero violations is a baseline, not a conformance claim.","Screen-reader use, keyboard-only operation, zoom and reflow, and cognitive load were not tested by people.","The run covers the nine scenarios listed above, not every route or component on the site."]},"thirdPartyLicenses":{"note":"This site redistributes third-party binaries, so their licence texts ship with it. The index names each component; the two licence texts are the full, unmodified GNU texts.","documents":[{"id":"notices","label":"Index of every third-party component this site distributes, with its licence and the path it ships at","url":"https://toolars.com/licenses/THIRD-PARTY-NOTICES.md"},{"id":"gpl-3.0","label":"GNU General Public License, version 3 — covers the ffmpeg core staged under /generated/ffmpeg/","url":"https://toolars.com/licenses/GPL-3.0.txt"},{"id":"lgpl-3.0","label":"GNU Lesser General Public License, version 3 — covers the libheif decoder staged under /generated/heic/","url":"https://toolars.com/licenses/LGPL-3.0.txt"}]},"notProven":["This is not a third-party audit. It is the project reporting its own measurements.","The quoted measurements come from the capture run on 2026-09-25 against a local production build, not from the live origin.","A tool workspace claim covers the tools measured. It is not a claim about every route, every browser, or the hosting provider's own logs.","Absence of a request in the harness window does not prove that no other code path anywhere could ever make one."]}