ZED-ZEN Media Converter is a 100% local, offline application that processes your files on your computer without sending any data to external servers.

This document explains the technology stack, security measures, and why this application is safe to use.

All libraries are:

• Open source with publicly auditable code
• Actively maintained by reputable developers
• Used by millions of developers worldwide
• Available on npmjs.com

// Our security settings (from main.js and forge.config.js)
{
  nodeIntegration: false,        // Renderer cannot access Node.js
  contextIsolation: true,        // Renderer is sandboxed
  RunAsNode: false,              // Cannot be run as Node script
  EnableNodeOptionsEnvironmentVariable: false,  // No env injection
  EnableCookieEncryption: true,  // Encrypted cookies
}

Nothing. Zero. Nada.

// Our "analytics" (from analytics.js) - LOCAL ONLY
localStorage.setItem('zedzen_total_conversions', count);
localStorage.setItem('zedzen_premium', status);

• All data stays in your browser's localStorage
• No external servers
• No tracking pixels
• No cookies sent anywhere
• No user accounts required

This application makes ZERO network requests:

• No telemetry
• No update checks (manual updates only)
• No license validation servers
• No cloud storage integration
• No crash reporting

You can verify this by monitoring network traffic with Wireshark or your firewall.

1. Code Signing - We support Windows code signing certificates
2. Open Source - All code is publicly auditable on GitHub
3. Reputable Dependencies - Only well-known, trusted libraries
4. Minimal Permissions - App requests only what it needs

1. Scan on VirusTotal: Upload the installer to virustotal.com
2. Check network: Monitor with Wireshark - zero external connections
3. Read the code: All source code is available in this repository
4. Build from source: npm install && npm run make

The main process handles:

• Window creation
• Native file dialogs
• File conversion (Sharp, FFmpeg, pdf-lib)
• IPC communication with renderer

No suspicious code:

• No eval() or Function() calls
• No dynamic code execution
• No obfuscated code
• No network requests
• No data exfiltration

Only 5 functions exposed to the web page:

contextBridge.exposeInMainWorld('electronAPI', {
  selectFiles: () => ipcRenderer.invoke('select-files'),
  selectFolder: () => ipcRenderer.invoke('select-folder'),
  getFileInfo: (filePath) => ipcRenderer.invoke('get-file-info', filePath),
  convertFile: (options) => ipcRenderer.invoke('convert-file', options),
  openFolder: (folderPath) => ipcRenderer.invoke('open-folder', folderPath),
});

No dangerous APIs exposed:

• No fs (file system)
• No child_process (command execution)
• No shell.exec (shell commands)
• No net (networking)

You can verify the integrity of this application by building from source:

# Clone the repository
git clone https://github.com/Jamaalx/zed-zen-converter.git
cd zed-zen-converter

# Install dependencies
npm install

# Build the application
npm run make

# Your installer will be in: out/make/squirrel.windows/x64/

Compare the hash of your build with our releases:

# Windows PowerShell
Get-FileHash "out\make\squirrel.windows\x64\ZedZen-Media-Converter-Setup.exe" -Algorithm SHA256

# Linux/Mac
shasum -a 256 out/make/squirrel.windows/x64/ZedZen-Media-Converter-Setup.exe

If you discover a security vulnerability, please report it responsibly:

1. Do NOT open a public GitHub issue
2. Email: [your-security-email@domain.com]
3. Include detailed steps to reproduce
4. Allow 90 days for fix before public disclosure

ZED-ZEN Media Converter is a safe, transparent, and privacy-respecting application:

• Open source - Fully auditable code
• Offline-only - No internet required or used
• Privacy-first - Zero data collection
• Secure architecture - Follows Electron security best practices
• Trusted dependencies - Only reputable, widely-used libraries

Your files stay on your computer. Period.

Last updated: December 2024 Version: 1.0.0 Author: Fortitudo Vincit SRL