What "Offline-First" Actually Means When You're Building a Privacy Tool

All tests run on an 8-year-old MacBook Air. "Offline-first" gets used to mean a lot of things. For most apps it means "works without internet, syncs when reconnected." For a privacy-focused PDF tool, it means something stricter: the app should be architecturally incapable of sending your data anywhere — not just configured not to. Here's what that actually requires in practice. The difference between "won't" and "can't" A tool that promises not to send your data is making a policy promise. A too