No upload · 100% local · GDPR-friendly · Private · Browser-based
Random Line Picker Without File Upload — 100% Private
Open the Private Picker →Most online tools process data on a server. You paste your list, it travels over the network to a remote machine, the server runs its logic, and the result comes back to your browser. For a list of fictional items this is harmless. For a list of real employee names, student rosters, patient identifiers, contest entrant data, or any personally identifiable information, that network transfer carries real risk — legal, reputational, and security-related.
The Flowfiles Random Line Picker is designed from the ground up to avoid this transfer entirely. The picking algorithm runs in your browser's JavaScript engine. Your list data is never serialized into an HTTP request, never transmitted to Flowfiles servers, never stored in a database, and never processed by any third party.
How Local Processing Works
When you load the Random Line Picker page, your browser downloads a small HTML file containing all the JavaScript needed to run the tool. After that initial download, the tool is self-contained. When you type or paste your list and click Pick, the following happens entirely within your browser's memory:
- The text content of the input textarea is split into an array of strings by newline character.
- Empty strings are filtered out if "Exclude empty lines" is checked.
- A random index is selected using
Math.random(), which uses the browser's native PRNG seeded with local entropy. - The selected string is written to the result display and output textarea.
- The pick is added to the in-memory history array.
At no point does any of this data leave the browser tab. The network tab in your browser's developer tools will show zero outgoing requests triggered by a Pick action.
Importing a File Without Uploading It
The "Import .txt" button uses the browser's File API (FileReader) to read a file from your local disk. This API was specifically designed to read files locally without transmitting them over a network. The file's contents are loaded into a JavaScript string variable in the browser's memory. No HTTP request is made. The file content never leaves your device.
This is fundamentally different from a file upload, where the file's binary content is encoded and sent to a remote server. With the File API, the file stays on your machine and only the text extracted from it exists temporarily in the browser's memory, cleared when you close the tab.
GDPR and Privacy Regulation Compliance
Under GDPR and similar privacy regulations (CCPA, LGPD, PIPL), transmitting personal data to a third-party processor requires legal basis, appropriate data processing agreements, and in some cases explicit consent from the data subjects. Using a server-based tool to process a list of names or employee identifiers may constitute data processing by a third party.
A browser-based tool that never transmits data avoids this classification entirely. The tool is processing data locally on the data controller's device, which falls outside the scope of third-party data processor regulations. This makes the Flowfiles Random Line Picker a safe choice for HR teams, teachers, healthcare administrators, and any other professional working with regulated personal data.
Security Considerations
Even if a server-based tool has strong security guarantees, there are attack surfaces involved: the HTTPS connection itself, the server's logging infrastructure, third-party analytics scripts on the result page, and browser extensions that intercept form submissions. A local tool eliminates all of these vectors for the sensitive list data. The only data that travels over the network is the initial page load — static HTML and CSS, containing no user data whatsoever.
Working Offline
Because the tool requires no server for its core functionality, it works in offline mode after the first page load. This is useful in environments with network restrictions — corporate intranets with proxy filters, conference venues with unreliable WiFi, or field environments without internet access. Load the page once, then use it as many times as needed without reconnecting.
Frequently Asked Questions
How can I verify no data is sent to a server?
Open your browser's developer tools (F12), go to the Network tab, and run a pick. You will see no outgoing requests triggered by the Pick action — only the initial static file loads are visible.
Does the tool use cookies to store my list?
No. The list data is only held in the textarea's DOM value property, which exists purely in the browser's memory and is not persisted in cookies, localStorage, or sessionStorage.
What happens to my data when I close the tab?
It disappears. Browser memory is cleared when a tab is closed. Nothing is retained on any server or in any persistent storage on your device.
Can my browser history reveal what was in my list?
No. The tool does not append list content to the URL. Browser history only records the page URL, not the content of textarea inputs.