←

About RedoSan Authenticity

What is RedoSan Authenticity?

RedoSan Authenticity is a free, open-source, client-side digital authenticity toolkit. It provides a comprehensive suite of tools for watermarking, fingerprinting, forensic analysis, provenance tracking, and content verification — all running entirely in your browser or via a Node.js CLI. No files are ever uploaded to any server; every operation happens locally on your machine.

Why Was It Built?

Digital content authenticity is increasingly critical in an age of AI-generated media, deepfakes, and misinformation. Existing solutions often require uploading sensitive files to third-party servers or expensive commercial software. RedoSan Authenticity was created to provide a free, private, and comprehensive alternative that puts control back in the hands of creators, journalists, and forensic analysts.

Complete Tool Suite

Image Watermarking — 9 algorithms (LSB, DCT, Zero-bit, Fragile, Neural SS, Multi-bit, Patchwork, Adaptive, Statistical) for embedding and extracting invisible watermarks
Audio Watermarking — 8 algorithms (LSB, Phase Coding, Echo Hiding, DSSS, QIM, DWT Haar, Patchwork, DCT) for embedding data in WAV audio files
Document Watermarking — Embed watermarks into TXT, DOCX, and PDF files using Zero-Width Characters, homoglyph substitution, whitespace encoding, line-shift, and word-shift techniques
Pixel Injection — 23 algorithms across 4 categories (spatial, frequency, deep learning, and professional) for advanced pixel-level data embedding
Fingerprinting — 17 cryptographic hash algorithms (SHA-1/2/3, BLAKE2/3, MD5, RIPEMD-160, Whirlpool) plus 4 perceptual hashes (aHash, dHash, pHash, wHash)
C2PA Provenance — Read, write, and verify C2PA Content Credentials with ECDSA signing for JPEG and PNG files
Decentralized Identity (DID) — Generate Ed25519, ECDSA P-256, and RSA key pairs with full W3C DID Document creation
OpenTimestamps — Create, verify, and upgrade blockchain-anchored timestamps using the OpenTimestamps protocol
Digital Certificates — Generate authenticity passports in PDF, DOCX, and EPUB formats with QR code verification
Forensic Analysis — Error Level Analysis (ELA), noise heatmaps, JPEG marker inspection, and metadata anomaly detection
Metadata Reader — Extract EXIF, XMP, IPTC, and PNG chunk metadata from images
File Converter — Convert between image, audio, video, document, and subtitle formats using ffmpeg.wasm
ID Forge — Generate UUID v4/v7, ULID, NanoID, and SWHID identifiers in bulk
Assistant — Built-in chatbot for guided help and troubleshooting

Technical Architecture

The application is built entirely with vanilla JavaScript — no frameworks, no build tools, no backend. It runs as a Progressive Web App (PWA) with offline support via Service Worker caching. The same algorithms power both the browser interface and the Node.js CLI, ensuring consistent results across environments.

All cryptographic operations use the Web Cryptography API (crypto.subtle) in the browser and Node.js native crypto in the CLI. Image manipulation uses the HTML5 Canvas API. Document processing uses JSZip for DOCX, PDF-lib for PDF manipulation, and jsPDF for PDF generation. Audio processing uses raw PCM data manipulation with FFT transforms implemented from scratch.

Who Is It For?

Journalists and fact-checkers — Verify the authenticity of images and documents before publication
Photographers and artists — Protect your work with invisible watermarks and prove ownership
Forensic analysts — Detect tampering, analyze compression artifacts, and examine metadata anomalies
Developers — Integrate authenticity checks into your workflow via the CLI or browser APIs
Legal professionals — Generate verifiable digital passports and timestamps for evidence preservation
Content creators — Establish provenance chains for your digital content from creation to publication

Privacy by Design

Privacy is not a feature — it is the foundation. RedoSan Authenticity processes everything locally in your browser. No images, no metadata, no personal information ever leaves your device. The only network requests are for loading CDN-hosted libraries (with SRI integrity checks) and contacting OpenTimestamps calendar servers (for timestamp creation and verification).

Open Source

RedoSan Authenticity is fully open source under the GNU General Public License v2.0. The complete source code is available on GitHub. Contributions, bug reports, and feature requests are welcome.

Internationalization

The interface is available in 8 languages: العربية (Arabic), Deutsch (German), English, Español (Spanish), Français (French), 日本語 (Japanese), 한국어 (Korean), and 中文 (Chinese). Right-to-left (RTL) layout is fully supported for Arabic.

Version

Current version: v1.6 — featuring Multi-Page Architecture (MPA), standalone tool pages, Document Watermarking, Audio Watermarking, DID, C2PA, Digital Certificates, File Converter, and 277+ unit tests across 35 test files with 40+ CI/CD workflows.

←

Privacy Policy

Last updated: June 2026

Our Commitment to Privacy

RedoSan Authenticity is designed to be 100% private by default. The application runs entirely client-side — in your browser or via the Node.js CLI. No files, metadata, personal information, or analytics data are ever collected, stored, or transmitted to any server. Every watermark, fingerprint, timestamp, and certificate is generated locally on your machine.

Data Collection

We collect nothing. RedoSan Authenticity has no backend server, no database, no user accounts, no tracking cookies, no analytics service, and no telemetry. The application is hosted statically on GitHub Pages and all processing occurs in your browser's JavaScript runtime or the Node.js CLI environment.

No uploads: Files you process are never sent over the network
No cookies: The application does not set or read any tracking or analytics cookies
No localStorage: User preferences (theme, language) are stored in your browser's localStorage for convenience only and never transmitted
No accounts: There is no registration, authentication, or user profiling

How It Works

When you upload a file to any tool in RedoSan Authenticity, the file is read into your browser's memory using the HTML5 File API. All subsequent processing — hashing, watermark embedding, pixel manipulation, metadata extraction, timestamp creation, certificate generation — happens entirely within the JavaScript runtime of your browser. The processed result is offered as a downloadable file or displayed on screen. No data is written to any disk on the server, nor is any data transmitted over the network (with the explicit exception of OpenTimestamps, described below).

Network Requests

The application makes the following network requests, all of which are necessary for functionality:

CDN library loading: JavaScript libraries (jsPDF, JSZip, PDF-lib, QRious, LameJS, FFmpeg.wasm) are loaded from cdnjs and jsdelivr CDNs. All loaded scripts use Subresource Integrity (SRI) hashes to ensure they have not been tampered with. These CDNs may log standard HTTP request metadata (IP address, User-Agent, requested file) in accordance with their own privacy policies. No data from your files is included in these requests.
OpenTimestamps: When creating a timestamp, the SHA-256 hash of your file (not the file itself) is sent to OpenTimestamps calendar servers to be anchored in the Bitcoin blockchain. The original file content cannot be reconstructed from this hash. Verification and upgrade requests similarly send only hash data.
Service Worker: The application registers a Service Worker for offline caching and security enforcement. The SW operates entirely within your browser and does not communicate with any external server beyond the initial page load.
GitHub Pages hosting: The application is hosted on GitHub Pages. GitHub may collect standard server logs in accordance with their Privacy Statement.

Third-Party Code

The following third-party libraries are loaded and executed client-side:

jsPDF — PDF generation for certificates and reports
JSZip — DOCX file creation and extraction
PDF-lib — PDF manipulation for document watermarking
QRious — QR code generation for certificates
LameJS — MP3 encoding for audio processing
FFmpeg.wasm — File format conversion
OpenTimestamps.js — Timestamp creation and verification

All libraries are loaded with SRI integrity hashes. No library has access to your files beyond what is explicitly passed to it by the application code. All libraries execute in your browser's sandboxed JavaScript environment.

Security

Content Security Policy: The application enforces a strict CSP that restricts script sources, prevents inline script execution, and blocks connections to untrusted origins.
Subresource Integrity: All CDN-loaded scripts and stylesheets are verified against SHA-384 integrity hashes before execution.
Service Worker: The SW acts as a security layer, blocking 68+ dangerous file extensions, enforcing a JavaScript file whitelist, and detecting embedded URLs at multiple encoding levels.
Domain origin check: All JavaScript files verify they are executing on the expected domain (redo-san.github.io, localhost, or 127.0.0.1) and silently refuse to run on untrusted domains.
File validation: Uploaded files are validated against a 6-layer security pipeline including extension blocklist, magic byte verification, content scanning, and document threat detection.

Children's Privacy

RedoSan Authenticity does not knowingly collect any personal information from children. The application is not directed at children under the age of 13. As no data is collected from any user at any age, there is no risk of inadvertent data collection from minors.

Changes to This Policy

This privacy policy may be updated occasionally to reflect changes in the application or legal requirements. The date of the last update will always be displayed at the top of this page. Continued use of the tool after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or the privacy practices of RedoSan Authenticity, please open an issue on GitHub or start a discussion in the Discussions section.

RedoSan Authenticity

Digital Watermark

Audio Watermark

Pixel Injection

Face Biometric

Forensic Analyzer

ID Forge

Fingerprint

Metadata

Timestamp

DID Identity

C2PA Provenance

Digital Passport

File Converter

Removal Tools

Document Watermark

Digital Watermarking

Audio Watermarking

File Fingerprinting

Search Results

Advanced Pixel Injection

Advanced Options

Face Biometric Rights

Metadata Reader

File Timestamping

Decentralized Identity (DID)

C2PA Content Provenance