Privacy receipts

Prove the file never left your browser

Most tools claim “we don’t upload your data.” Privacy receipts make that claim verifiable — downloadable JSON generated with Web Crypto, not marketing copy.

Open Receipt Verifier Read the spec
Why this exists

Trust is not a screenshot

The problem

Developers paste JWTs, API keys, contracts, and customer data into random formatters. Sites say processing is local, but there is rarely proof an auditor can inspect. A compromised CDN and an honest operator look identical from the outside.

The proof

When you run a receipt-capable tool, the browser hashes available input/output metadata locally and offers a JSON receipt for download. No server round-trip. Share it with a client, reviewer, or teammate.

Open schema

What a privacy receipt contains

Each receipt follows our JSON Schema. Hashes are SHA-256 via the Web Crypto API — never the raw file contents.

type

OneDevToolkit.ProcessingReceipt — the document kind.

tool

Which utility ran (JSON Formatter, PDF Compress, HMAC signer…).

processedAt

ISO timestamp captured in your browser.

privacyMode

Always client-side for these receipts.

statement

Human-readable assertion that no network upload occurred.

input / output

Optional file metadata with SHA-256 — never the raw payload.

{
  "type": "OneDevToolkit.ProcessingReceipt",
  "privacyMode": "client-side",
  "tool": "hash-generator",
  "processedAt": "2026-08-20T04:22:11.000Z"
}
Pipeline

How it works technically

1

Run a tool

Use a receipt-capable utility — hashes, JWT, PDF, webhook HMAC, and more.

2

Hash locally

The browser hashes available input/output metadata with Web Crypto.

3

Assemble JSON

A receipt is built on-device and offered for download — no upload.

4

Share & verify

Send the file to a reviewer. Check structure in Receipt Verifier.

Advanced users can export a PDF certificate. The JSON schema remains the canonical machine-readable format.

Hands-on

Try it in three minutes

Run a job

Use the receipt control in the workflow chrome after processing.

Verify JSON

Drop the file into Receipt Verifier.

Ship the proof, not the slogan

Open spec, client-side hashes, downloadable JSON. Built for developers who paste secrets into tools.

Full specification Compliance pack