Standard: Zero-Knowledge Client-Side Architecture
Last Updated: May 03, 2026 • Document Version 2.4.0
Executive Summary
Camly is built on the principle of Absolute Data Sovereignty. Unlike 99% of online editors, we never upload your files. All editing happens in your browser's RAM. This policy outlines the technical and legal structures that guarantee your privacy.
1. Introduction and Scope
Camly ("we," "our," or "us") owns and operates https://camly.org. This Service is a browser-native toolset for professional media manipulation. Our mission is to democratize high-end creative tools without the "privacy tax" common in modern SaaS platforms.
This document defines how we manage metadata and confirms our technical inability to access your content. By using Camly, you enter into a trustless relationship where security is guaranteed by the code's architecture rather than just our promise.
2. Technical Information Protocol
2.1 The Zero-Knowledge RAM Model
The defining characteristic of Camly is its Client-Side Only nature. We utilize WebAssembly (WASM) and the Canvas API to perform complex mathematical operations (DCT, perspective transforms, DPI mapping) directly on your device's hardware.
- No Server Transmission: Pixel data never crosses the network to a remote server.
- Volatile Storage: Your files exist only in your machine's volatile memory (RAM).
- Instant Purge: Data is physically wiped the moment the browser tab is closed.
- Zero Cache: We do not use persistent disk caching for user-generated content.
2.2 PII (Personally Identifiable Information)
Camly is an Account-Free Platform. We do not collect names, email addresses, phone numbers, or credit card details for basic use. You are anonymous by default.
2.3 Automated Log Data
Like all web infrastructure, our hosting servers (provided by top-tier global vendors) log basic technical handshakes required for packet delivery. This includes IP addresses, browser user-agents, and timestamped requests.
Critical Note: This metadata is handled separately from your creative files. Your IP address can never be linked to an image you edited because the image never reached our servers.
3. Cookies and Zero-Tracking Policy
Camly operates a Strict Zero-Behavioral-Tracking policy. We do not use "Super-Cookies," cross-site tracking pixels (like Facebook Pixel), or behavioral analytics that profile your identity across the web.
What we DON'T use:
- • Persistent tracking cookies
- • Fingerprinting technologies
- • Targeted advertising identifiers
- • "Shadow profiles"
What we DO use:
- • LocalStorage (for UI preferences only)
- • SessionStorage (for temporary workflow memory)
- • Essential security headers
4. Your Rights Under Global Frameworks
Regardless of where you live, Camly respects the highest international standards of data protection, including the GDPR (EU), CCPA (California), and DPDP Act (India).
Right to be Forgotten
Since we never store your files, this right is satisfied by default. Once you close the tab, we have no record of your content.
Right to Data Portability
You have absolute control over your exports. You decide the format (JPG, PNG, PDF) and the destination.
Right to Transparency
You have the right to know how our WASM engine works. Our architecture is designed to be auditable by your browser's developer tools.
5. Security & Integrity Measures
Our production environments use HSTS (HTTP Strict Transport Security), preventing protocol downgrade attacks. We employ advanced Content Security Policies (CSP) to ensure no unauthorized third-party scripts can execute within our environment, creating a "clean room" for your document processing.
6. Contact & Data Protection Officer
If you have complex technical questions regarding our browser-side logic or wish to exercise your rights regarding logged metadata, please contact our team:
Official Email Support
support@camly.org
Privacy by Design • Data Sovereignty Verified • No Uploads Guaranteed
© 2026 Camly Private Limited. All Rights Reserved.