Security
How Token Saver keeps your files private. Last updated: 3 November 2026
Runs on your device
Every conversion, cleanup, OCR and token count happens in your browser, with code that is part of the page or the extension.
Nothing is uploaded
We have no server that receives files. Once a tool has loaded, it keeps working with your internet switched off.
Nothing is stored
Your content is gone when you close the tab. Only settings and the number of tokens you saved stay, in your browser.
No tracking
No cookies, no analytics, no ads, no fingerprinting, no account. We don't know who you are or what you convert.
On the website
- Strict Content Security Policy. Every page only runs scripts served from token-saver.es itself, with no inline or remote code. Plugins, forms that send data and foreign base addresses are blocked.
- No third-party code. The libraries (pdf.js, mammoth, tesseract.js and others) are hosted on token-saver.es, not loaded from external CDNs, so nobody else can change what runs on the page.
- Network blocked by default. Pages may only connect back to token-saver.es (for example, to load the OCR language data). Two optional features are the only exceptions, and each one says so before you use it:
- Web to Markdown → URL sends the address you type to Jina Reader so it can fetch the page. Pasting the page's content instead works offline.
- Token counter → Exact count for Claude sends the text to Anthropic's API with your own API key, directly from your browser.
- HTTPS only, with insecure requests upgraded automatically, no referrer sent to other sites, and protection against the site being shown inside another site's frame.
- Files are read, never executed. PDFs, Word and Excel files, images and folders are parsed as data. Text from your files is shown as text, not as HTML.
In the browser extension
- Only on the AI chats. It runs on Claude, ChatGPT, Gemini, Copilot, Perplexity and DeepSeek and nowhere else. It cannot see other sites, your history or your tabs.
- Minimal permissions: storage (your settings and savings), scripting (to load a converter only when you drop a file) and offscreen (Chrome only, to read screenshots on the device).
- No network requests. The extension never contacts any server. The OCR engine and its language data are bundled inside it.
- No remote code. All its code ships inside the package reviewed by Chrome, Edge and Firefox, and its own pages forbid any other script.
- Isolated from the page. It runs in the browser's isolated world, its card is in a closed shadow root, and its background part ignores messages from websites and other extensions, checking that each request comes from its own script on one of those six chats.
- You decide. Nothing is sent to the chat until you choose Paste as text, and you can always attach the original instead. Each feature can be switched off.
What stays on your device
Only what you see listed on the privacy page: the AI assistant you picked, your on/off settings and the number of tokens you saved per day, by tool and assistant, for Your savings. Numbers only, never content, file names or addresses. You can clear them at any time.
Report a problem
If you find a security issue, write to pruthjperez@gmail.com. We will reply and fix it as soon as possible.