GDPR and LGPD when you are not collecting personal data
GDPR (Europe) and LGPD (Brazil) focus on lawful, transparent processing of personal data. A browser tool that avoids accounts and cloud payloads can minimize what it processes—but minimization is not exemption from good practices.
Data minimization by design
If you do not run a user table or file warehouse, many classic DPIA risks shrink: no massive breach of uploaded documents on your servers.
What might still be personal
Server logs, support e-mails, or optional analytics could contain IPs or identifiers. Keep those collections narrow and documented.
User rights still apply
Even with little data, people may ask what you process. Clear privacy copy and contact paths matter.
Pairing with local-first
Browser local-first keeps history on device; no accounts avoids profiling.
FAQ
Are signaling payloads personal data?
They can be if they identify individuals in context. Treat signaling carefully and avoid logging it.
LGPD for Brazilian users?
Same minimization mindset: collect less, explain clearly.
Metadata article
Try it in your browser
No account or upload required—pair two devices and share directly.