Security and safe use
DocPixel is a browser-based file utility site. It does not ask visitors to install desktop software, create an account, enter payment details or give access to cloud drives.
Local file handling
Standard tools read selected images, PDFs and ZIP archives with JavaScript in the browser. A result is saved only after a visible download action. The production package contains no intended server-side file-upload endpoint for conversion and no user file-history database.
Same-origin resources
Core JavaScript libraries, styles, fonts, icons and the Background Remover model resources are hosted on the DocPixel domain in this package. This reduces dependence on third-party runtime code during conversion. The optional language feature opens a translated copy of the public page only after a visitor selects a language.
Protecting the website surface
The PHP pages send security headers that restrict framing, object embedding, referrer detail and unnecessary device permissions. A content security policy limits resource origins. The deployment configuration blocks directory browsing and direct public access to application includes, configuration data, internal JSON content libraries, logs and backup-style files.
Safe download checks
- ✓Open the downloaded result before deleting the original.
- ✓Confirm the filename extension and expected page or archive-entry count.
- ✓Scan ZIP contents from an untrusted sender before opening executable or script files.
- ✓Use a non-sensitive sample when reporting a problem.
ZIP archive risks
A ZIP archive is only a container. It can include harmless documents or dangerous executable content. DocPixel's unzip interface lists entries, but it cannot guarantee that every extracted file is safe. Do not open unknown scripts, applications or password-protected archives from an untrusted source. Avoid extracting an archive directly over important folders.
Document limitations
Conversion is not the same as authenticity verification. DocPixel does not validate digital signatures, legal validity, malware status, document ownership or whether an edited file will be accepted by a government, employer, bank or other service. Password-protected or damaged files may fail. Keep an original copy and follow the receiving organization's requirements.
Reporting a security concern
Report unexpected network behavior, a suspicious redirect, exposed internal file or reproducible security problem to teamc2755@gmail.com. Include the page URL, approximate time, browser and a screenshot with private information removed. Do not test by accessing another person's data or disrupting the service.