Your photo stays on your device.
The editor does not upload image contents or send filenames to an analytics service. Optional waitlist registration is a separate request containing your email address.
Local image processing
Your browser opens the selected file and performs image operations on local canvas data. Background removal runs a model locally. The editor has no image-upload endpoint and does not submit results to marketplaces, social accounts or government services. Downloaded files remain under your control.
Network requests still happen
The site requests its own HTML, scripts, styles, fonts and sample images. Background removal downloads model weights from the Hugging Face CDN and its delivery providers. Fast downloads U2netp (4,574,861 bytes). High detail downloads BiRefNet-lite 512 (191,877,254 bytes) only after you select it and start removal or product framing. Merely opening a page or changing the model selector does not download weights. Both models process image pixels on your device, using WebGPU when available and WASM when it cannot run. The studio displays the chosen model’s size before the download. Those providers receive normal network information such as the request IP address, but the model request does not contain your image or filename. Runtime code is served with the site. No analytics, advertising scripts or tracking cookies are installed by this application.
Browser storage
Each selected model may be cached in Cache Storage to avoid downloading it repeatedly. The app checks the pinned file size and SHA-256 hash before use. Cancel processing terminates the local model worker; it does not remove an already cached model. Clear site data in your browser to remove model caches. Cache availability depends on your browser. When you choose a photo on the home page, a temporary IndexedDB record transfers it to the studio on this same origin. The studio deletes that record when it reads it. If you abandon the transfer before the studio opens, the temporary record may remain until a later studio visit or until you clear site data in the browser.
Open editor pixels and brush history are held in page memory. Clear photos releases the active workspace references. This is not a forensic secure-erasure feature. Downloaded files, operating-system caches and browser-managed storage are separate from the visible workspace.
Optional development waitlist
The pricing form sends the email you enter to our same-origin waitlist endpoint. The record stores a normalized email, the signup time and the source page. It is used for updates about the planned Pro product. The free editor does not require a signup.
The endpoint uses a daily hashed IP key with a short expiration to apply a light signup throttle. The application does not store the raw IP in the waitlist record. The hosting provider may separately process access logs and network metadata under its own service practices. To request removal of a signup record, email contact@backdropless.com from the registered address.
External links and changes
Official specifications and competitor links lead to other websites with their own data practices. Opening those links is separate from processing an image here. This policy describes the current implementation; material changes to processing should be reflected here before the new behavior is introduced.