Zero-Disk Retention Architecture & Linux RAM-Disk Ephemeral Security

Document confidentiality and privacy are the non-negotiable architectural pillars of freeOCR.me. Unlike conventional cloud document utilities that persist uploaded files to solid-state drives (SSDs) or cloud object storage buckets (e.g., AWS S3, Google Cloud Storage)—where files can remain in filesystem journals, metadata logs, and backup snapshots—freeOCR.me operates on an uncompromising Zero Persistent Storage architecture.

1. The Cloud Storage Vulnerability Vector

When you upload sensitive files (such as medical invoices, corporate tax filings, legal discovery bundles, or identity documents) to conventional conversion platforms, standard workflows write files to persistent storage. Even if a service claims to "delete files after 1 hour", deleting a file on an SSD only unlinks the file allocation table pointer. The underlying flash memory cells retain the raw data until garbage-collection wear-leveling cycles overwrite them weeks later.

Furthermore, cloud object buckets routinely store asynchronous replication copies across availability zones, creating multiple attack surfaces for credential leaks, malicious internal actors, and compliance violations under GDPR and HIPAA regulations.

2. Linux tmpfs Volatile RAM-Disk Ingestion

freeOCR.me eliminates storage vulnerabilities by processing documents entirely within volatile Linux tmpfs RAM disk mounts:

• Pure DRAM Electrical Storage: Uploaded PDF streams, intermediate raster page bitmaps, neural bounding-box vectors, and generated output files exist strictly as volatile electrical charges across system DRAM chips. At no point does raw document data ever touch physical, non-volatile solid-state drives or spinning hard disk platters.
• Kernel-Level POSIX Unlinking: The microsecond an OCR conversion finishes and client download links are delivered, an automated POSIX unlink() syscall executes. The kernel de-allocates the memory inode and wipes the page tables.
• Autonomous Watchdog Janitor Daemon: A continuous asynchronous watchdog daemon sweeps memory directories every 60 seconds. Any inactive temporary buffer older than 60 minutes is forcefully zeroed (memset) and reclaimed.

3. Zero Account Registration & Ephemeral Email Delivery

Security through minimization: freeOCR.me does not require account creation, username/password credentials, or credit card collection. For large multi-page documents where users opt to receive download links via email:

• Your email address is utilized strictly as an in-memory variable for SMTP dispatch.
• Email addresses are never stored in databases, relational tables, or caching tiers.
• We cannot send unsolicited marketing or promotional messages because your contact details do not exist in our systems.