What it does
- Crop, compress, annotate, blur, pixelate and clone — all locally
- Batch-edit a folder without uploading it
- Keep working with the network switched off
- Use it with no account at all
What runs on your machine
Everything in Edit, Mark up, Hide and most of Batch. The engine is Rust compiled to WebAssembly running in a worker thread, and your originals and edits live in the browser's own database on your disk. Pull the network cable and all of it keeps working, including export.
What does not, and why
Background removal and the AI object-removal pass run on servers, because the models are hundreds of megabytes and would have to be downloaded before the first click. They are on the paid tier for the same reason: each run costs money. Signing in also adds sync and share links, which are a server by definition. Every one of those is optional, and there is a switch in Settings that turns uploads off entirely.
Why the distinction matters
"Private" is a claim almost every editor makes and very few define. The useful question is not whether a company promises to behave, it is whether the picture was ever sent anywhere in the first place. For most of what this editor does, the answer is no — and where the answer is yes, this page says so.
No account needed
Every tool that runs on your own machine works logged out, with nothing to sign up for. Signing in adds sync across your devices and share links; Pro adds the passes that need a server. The no-upload page draws the line between the two, and Architecture shows it table by table.