How does on-device processing work?
Your browser reads the image; the website does not receive its contents.
Local file work
The browser reads the files you choose and runs bounded processing in a worker. It creates separate Blob copies for downloads. The application does not upload image contents, filenames or extracted metadata to a processing server.
Network requests still exist
Your browser loads the website and its assets. Google Analytics sends site-usage requests to Google. File contents and extracted metadata are excluded from analytics; this is not a claim that the entire website makes zero network requests.
Optional browser recovery
From Settings, with explicit consent, originals, choices and results can be stored locally for up to 24 hours. Expired records are cleared when the app opens again, and the browser may evict them sooner. Declining keeps the session memory-only. Clear session in Settings removes app-held session and recovery records, not original files or downloads.