File Security

Your file security is our top priority. Here's how Open Compressor protects your data.

Client-Side Processing

Most compression tasks are performed directly in your browser using modern web technologies. This means your files never leave your device. We use:

• Compression Streams API — native browser compression
• WebAssembly (WASM) — near-native performance for complex algorithms
• Browser Image Compression — client-side image optimization

Server-Side Processing

For complex formats (video, audio, some PDFs), files are processed on our secure servers:

• All transfers encrypted with HTTPS/TLS
• Files processed in isolated, sandboxed environments
• MIME type + Magic Bytes validation prevents malicious uploads
• Automatic deletion within 24 hours of upload
• Download links expire after 1 hour

Data Controller / Processor

In file upload scenarios, you are the data controller and Open Compressor is the data processor. We process your files solely for compression purposes and do not read, analyze, or retain file contents.

What We Log

For security purposes, we retain minimal logs: upload timestamp, IP address, file type, file size, and processing result. These logs do not contain file contents and are deleted after 30 days.

Compliance

Open Compressor complies with GDPR, CCPA, and other applicable data protection regulations. We undergo regular security audits.