Privacy and processing methodology
EnvSift is a static, browser-only application. Pasted text and selected files are processed in the current tab; there is no application server that receives or stores ENV content.
What happens to a file
- 1. Read locally. A selected file is read through the browser File API.
- 2. Parse in memory. EnvSift validates and transforms the text with client-side TypeScript.
- 3. Render locally. Results stay in the page until you clear them, navigate away, or close the tab.
- 4. Export on request. Copy uses the Clipboard API and downloads are created as local browser blobs.
Never included in analytics
- ENV contents, keys, or values
- Selected filenames or downloaded output
- Copied text or raw parser error messages
- Session recordings, form autocapture, or exception payloads
What may be measured
- Page views, page leaves, Web Vitals, and heatmap coordinates
- Which tool was opened
- Input method: paste, file, or drop
- Bucketed file and variable counts plus success or failure
Storage and third parties
The selected theme and anonymous analytics identifier may be stored in localStorage. When analytics is configured, privacy-filtered events go to PostHog; browser Do Not Track is respected. EnvSift does not create accounts, upload files, or persist editor contents.
Verify the implementation
EnvSift is open source. You can inspect the parser, analytics allowlist, and browser-only UI directly in the repository.