Local tools
Password values, TOTP secrets, and Markdown documents are not submitted to FastAPI, written to cookies, or placed in browser storage. Raw HTML in Markdown is displayed as text rather than executed.
Network tools
The IP utility contacts the server because its purpose is to display information visible to that server. Normal access logs may contain source IP and request metadata.
Third-party scripts
Password, TOTP, and Markdown pages exclude advertisements, third-party analytics, widgets, and externally hosted fonts.
Browser protection
The application sends a restrictive Content Security Policy, blocks framing, and disables unnecessary browser permissions.