Privacy Policy

Last updated: 2026-08-25

This Privacy Policy describes what data the XMLPilot web app processes and why. All core XML formatting, validation, minification, streaming, and XPath evaluation are performed inside the user's browser (client-side) by a Web Worker.

XML Content

XML you paste or upload into the formatter is processed locally, inside the browser and the included Web Worker. No code in this repository sends XML document contents to external servers for the default formatting, validation, minification, streaming, or XPath features.

What we may collect

• IP address: may appear in server access logs at your hosting provider.
• Analytics: not included in this codebase by default.
• Cookies: the client code does not set cookies by default; hosting or third-party services may set cookies.

Security measures

Client-side processing reduces the risk of accidental data exposure. If you add server-assisted features, ensure TLS, authentication, and redact request bodies from logs.