Privacy

Rendering happens 100% client-side. Diagram content never leaves the browser, and there are no calls to external services. The package works offline after the initial page load.

This makes the integration suitable for corporate environments with strict security policies, air-gapped networks, and applications that need data sovereignty.

The one exception

Icon packs that use the url form do fetch from a URL you provide — but that’s your choice, not a default behavior. The icons form embeds the data directly, so no network request is made at all.

The loader form

Even the legacy loader form never ships function bodies to the client. The integration only inspects the function source for a fetch('...') URL at build time and forwards that URL. If no URL turns up, the pack is skipped with a warning.