My Karya Kit security
Security
Last reviewed September 22, 2026
Local processing
Supported image, PDF, text, data and generator tools are designed to process working content in your browser. My Karya Kit does not need to upload those working files to a My Karya Kit processing server for supported local workflows.
Server-backed features
Feedback, the public feedback wall, administrator features and any future explicitly server-backed features are separate from local tool processing. Server-backed requests are limited to the information needed for their stated purpose and are protected with input validation and rate limiting where implemented.
Security controls
The application uses security headers, content security policies, bounded request bodies, rate limits on public submission endpoints, output escaping, controlled embed framing and server-only handling for privileged credentials.
Responsible security reports
If you believe you found a security vulnerability, please email mykaryakit@gmail.com with the affected URL or feature, a clear description of the issue, reproducible steps, and any relevant evidence. Do not include secrets, private keys, passwords, or unnecessary personal data in a report.
Important limitation
Security controls reduce risk but cannot guarantee that every defect, third-party dependency issue, hosting issue or future change will be free of vulnerabilities. Please avoid using the service as a substitute for your own security controls or backups.
This security page describes the current application design and is not a guarantee of security or a legal warranty.