Security fixes are applied to the latest commit on main.

Please use GitHub private vulnerability reporting for this repository. Do not include real client data, credentials, or other sensitive records in a report.

Keepside has no backend and does not transmit workspace data. Records remain in the browser profile until the user exports or clears them. Browser storage is not encrypted by Keepside and should not be used for regulated or highly sensitive information without additional device-level protections.