gallsec
How to verify that nothing leaves your device
This English site uses the United States / United Kingdom pack: SSN / NINO / NHS and US/UK name dictionaries. Other English-speaking countries will follow. Other languages: Polski /pl · Français /fr · Deutsch /de · Español /es · Italiano /it · 中文 /zh · हिन्दी /hi · Português /pt · বাংলা /bn · 日本語 /ja.
gallsec is designed so documents, prompts and keys stay in the current browser tab. You do not have to take our word for it - you can watch the Network panel while you work, or disconnect from the internet after the app is ready.
Shared checklist
- Wait until the banner says the app is ready offline. Prepare optional PDF support first if you need it - that download is public code, not your document.
- Open the Network panel for your browser (steps below) and clear the request list so you start from an empty view.
- Load and process a document or prompt. New requests that carry your document content should not appear.
- Optionally disconnect from the internet (or enable airplane mode) and repeat the full workflow from a ready state.
Open the Network panel
Chrome / Edge
- Press F12, or Ctrl+Shift+I (Windows/Linux) / ⌘⌥I (macOS), to open DevTools.
- Select the Network tab.
- Optional: enable Disable cache while DevTools remains open.
- Click Clear (the 🚫 icon) so the request list is empty before you load a document.
Firefox
- Press F12, or Ctrl+Shift+E (Windows/Linux) / ⌘⌥E (macOS), to open the Network monitor.
- Confirm you are on the Network tab.
- Optional: open the gear menu in that panel and enable Disable HTTP Cache (when toolbox is open).
- Click the trash icon to clear the request list before you load a document.
Safari
- Enable the Develop menu once: Safari → Settings → Advanced → “Show features for web developers” (wording may vary by version).
- Open Develop → Show Web Inspector, or press ⌘⌥I.
- Select the Network tab.
- Click the clear button so the request list is empty before you load a document.
On a phone or tablet the same checks apply, but opening a full Network panel usually needs a desktop browser on the same page, or remote debugging from a computer. Airplane mode after readiness is still a useful check on mobile.
What this check shows - and what it does not
- The page Content-Security-Policy includes connect-src 'none', so the application itself cannot open new network connections after load.
- Your browser may still check for Service Worker updates on its own schedule; that is browser maintenance of public app files, not an upload of your document.
- Extensions with page access, malware and the operating system are outside this check. Use a trusted device. Once you copy a result into another service, that service’s rules apply.