Separate frame
The photo tool runs in its own frame on a separate origin. Ads and analytics load only on the outer page and cannot read that frame.
No route out
A strict Content Security Policy blocks every network call from the frame except fetching our own code and model files. Those files are checked against a recorded SHA-256 hash before use.
Saved locally
The finished file is passed to you as a local download. Messages between the frame and the page carry status only, never image data.
Check it yourself
- Open your browser's developer tools and select the Network panel.
- Process a photo.
- Confirm that no request carries image data.
- Inspect the Content-Security-Policy header of the tool frame.