XML FolioXML Folio / Notebook
Your source stays in this workbench.
The public builder processes pasted text and chosen files inside your browser tab.
What happens to input
The builder does not upload XML, fetch the supplied source URL or contact links inside the source. It has no application account, payment flow, analytics script or paid conversion API. It does not save your input in local storage or session storage. Reloading restores the synthetic example; Clear removes the current inputs, reading copy and download state.
Cloudflare serves the website and processes normal web-request metadata. Browser features, extensions, operating-system services or your own device policies can have their own behavior. The local-processing statement describes this application’s code, not every component of your device.
Files you choose to save
The HTML download contains the selected records, publication title, source link and generation timestamp. It can reveal the same material as the preview. The field manifest contains titles, identifiers, raw and resolved links, omission paths, warnings and hashes. Query strings and record IDs can be sensitive even when the main description is not.
The manifest records the hash of decoded UTF-8 text and, for uploaded files, a separate original-byte hash. Neither anonymizes the records. The original XML is not rewritten, and the generated HTML does not embed the complete raw source, but selected source values are necessarily present in the output. Review files before emailing or hosting them.
Optional refresh belongs to the exported page
If you select manual refresh, the HTML contains a script that requests its configured XML source only after a click. It works only when the page is hosted on the source’s own origin. It omits credentials, rejects redirects and applies response and parsing limits. That request goes from the visitor’s browser to your configured source; it does not pass through XML Folio.
A failed refresh leaves the displayed copy unchanged. A successful refresh updates the current tab, not the file stored on your server. The static snapshot remains available without JavaScript. The exported page contains a restrictive content policy, but the hosting server’s own policies can impose additional limits.
Source markup and external resources
Stylesheet instructions are recorded as data. The workbench does not fetch the stylesheet, load source images, follow enclosures, run pasted code or expand declared entities. Unsupported XML shapes and DTD/entity declarations are refused. Descriptions containing markup are displayed as text rather than inserted as source HTML.
Related-product links and contact
Links to WebTraceCheck and CleanTempMail include the source domain, topic and placement for attribution. They include no pasted XML, generated manifest or input hash. Those services have their own policies. The links are optional; you can use your own browser and test inbox for the steps in the publication guide.
If you email support@cleantempmail.com, the message is handled through normal email systems. Send a small synthetic or redacted reproduction rather than a private feed. Closing this page does not delete files you downloaded or messages you sent.