Privacy and processing methodology
EnvSift is a static, browser-only application. Pasted text and selected files are processed in the current tab; there is no application server that receives or stores ENV content.
What happens to a file
- 1. Read locally. A selected file is read through the browser File API.
- 2. Parse in memory. EnvSift validates and transforms the text with client-side TypeScript.
- 3. Render locally. Results stay in the page until you clear them, navigate away, or close the tab.
- 4. Export on request. Copy uses the Clipboard API and downloads are created as local browser blobs.
Never included in analytics
- ENV contents, keys, or values
- Selected filenames or downloaded output
- Copied text or raw parser error messages
- Session recordings, editor/form input autocapture, or exception payloads
What may be measured
- Page views, page leaves, Web Vitals, and heatmap coordinates
- Which tool was opened
- Input method: paste, file, or drop
- Bucketed file and variable counts plus success or failure
- Explicitly marked navigation and theme-control clicks
- WebMCP tool name, outcome, and bucketed input size
Storage and third parties
The selected theme is stored in localStorage. PostHog receives privacy-filtered events in cookieless mode and stores no analytics identifier in cookies, localStorage, or sessionStorage. It derives a non-reversible daily identifier on its servers for audience measurement, so visitors cannot be recognized across days. Browser Do Not Track is respected. EnvSift does not create accounts, upload files, or persist editor contents.
Browser agents and WebMCP
In compatible browsers, EnvSift exposes its six deterministic tools through WebMCP. These tools run the same local functions as the visible interface. EnvSift analytics receive only the tool name, success or failure, and a broad input-size bucket—never tool arguments or results. Content you give to a browser agent may still be processed under that agent provider's privacy terms, so do not share secrets with an agent you do not trust.
Verify the implementation
EnvSift is open source. You can inspect the parser, analytics allowlist, and browser-only UI directly in the repository.