100% Client-Side & Serverless

All Markdown parsing, KaTeX math rendering, and Mermaid diagram rendering execute 100% locally inside your web browser. No document text or metadata is ever transmitted to external servers or AI APIs.

Privacy-First Web Analytics & Document Isolation

Your document content, text, and files are never sent to us or to any server of ours. On our hosted web application (prisment.io), we use standard Google Analytics to count aggregate page visits and which features are used — a desktop download or an HTML export, never the document itself — and to optimize web app performance. The desktop app collects only anonymous, aggregate usage data (a daily active signal, OS, app version, and coarse country-level location) to improve it, which you can disable anytime from the Help menu — no document content, text, or file names, ever. The desktop app also has an optional Local AI assistant, off by default: when you turn it on, it sends document text only to a model server running on your own computer, over a loopback connection that cannot reach the internet, and it never sends that text to us or to anyone else. It can also read a web page you allow in a dialog the app shows — a link you type into a question, or, with the assistant's Follow links in documents switch on (off by default), a page your documents link to — once, for the chat or for the workspace; that request carries only the address you allowed, with no cookies and no document text beside it. The desktop app's Source Control runs the git program already on your computer when you press its buttons: Pull, Fetch and Clone then talk only to the repository you chose, using your own sign-in, and Push does too — what you push goes where you sent it, never through us. Its Clone box can also search GitHub, GitLab and Codeberg for public repositories as you type: after a short pause, only the words you typed are sent to those three sites, with no cookies, no account, no file names and no document text, and you can turn that off in the box. If the GitHub CLI (gh) is installed and signed in on your computer, Clone can also list your own repositories, private ones included, through it: Prisment runs gh, which asks GitHub with your own sign-in — Prisment never sees or stores that sign-in, nothing you type is sent for it, and without gh Clone works as before. Prisment Lite, the Mac App Store version, has none of this: it has no Local AI assistant, reads no web pages and runs no git — it is for documents only. We never sell user data. The hosted website measures ad conversions for our own campaigns; the desktop app carries no advertising SDK of any kind. Model tuning preferences stay on this computer; generation settings are sent only to that same local model server.

Local Machine Data Isolation

When you mount local folders or edit drafts, your files remain strictly on your device. File System Access API operations occur directly between your web browser and your local disk without cloud proxies.

Standalone HTML Export

An exported document carries your content and nothing else — no account data, no identifiers and no analytics: an export never reports anything back to us or to a third party. It is a single HTML file that loads its stylesheet and runtime from cdn.prisment.io the first time it is opened and then caches them, so it is not a fully offline bundle. With no network at all the page still shows your document as plain, copyable text rather than a blank page. For a guaranteed-offline copy, use Print / PDF.

Open-Source Software

Prisment is built with open-source software. Every build lists the third-party packages it includes — each with its version, its licence and the full licence text — and ships that list with the app. The desktop app carries its own copy, under Help › Third-Party Notices. Read the open-source licences

Free, Local & Private Guarantee — No user files ever leave your browser

Have additional questions about our security architecture? Check our FAQ or reach out to our team.