FAQ

Do tools call a server API?
Crypto operations use Web Crypto and client libraries only. Blog/feedback may use same-origin PHP when enabled — that path never receives tool secrets.
Why warn about BIP39 / RSA keys?
Browsers and extensions can be compromised. Treat generated material as throwaway test data.
Is analytics included?
v1.0 does not add a separate analytics product. Any future tracking will be disclosed on the Privacy page.
Where is the blog?
When configured, ThinkPHP serves /blog and /backend. Pure-frontend deploys can point Blog/Feedback to the hub site.