Scope
This draft applies to the Ziri Developer Tools website, including the Universal SSH Key Converter and its client-side RSA generation and format-conversion features. It does not describe unrelated websites, browser extensions, operating-system services, or software operated by third parties.
Local key processing
Key generation and conversion run in the browser. The application has no key-upload endpoint, account system, application database, analytics integration, or telemetry pipeline. Key strings are not intentionally placed in cookies, localStorage, sessionStorage, IndexedDB, URLs, or application logs.
Static hosting metadata
The site must download HTML, CSS, JavaScript, and other static assets before it can run. The hosting and network providers may process ordinary connection metadata such as IP address, requested path, user agent, timing, and security signals while delivering those assets. Those infrastructure records are separate from the key-processing workflow.
Browser and device boundary
Browser extensions, clipboard managers, managed-device agents, accessibility software, malware, and the operating system may observe data displayed or copied on a device. Use a trusted browser profile and machine for sensitive production credentials.
Retention and Clear
The application keeps key material only in runtime memory for the current page session. Clear removes visible values and derived details and asks the crypto layer to wipe tracked byte arrays. JavaScript strings are garbage-collected, so deterministic physical memory zeroization cannot be guaranteed.
Contact and changes
The operator name, privacy contact, effective date, and change-notification process must be inserted before this draft is approved for launch.