Image privacy

The original image is loaded into your browser’s memory. Choosing a file, drawing areas, and typing new text do not upload the full image. Signed out, nothing is saved: refreshing or closing the editor clears the work. Signed in, finished images are saved as described under Accounts and history.

When you draw an area, the editor tries to read the text inside it so it can fill in Current text. This recognition runs in your browser with an open-source engine (Tesseract) whose files are served from this site. The image and the recognized text are not sent anywhere for this step.

Built-in samples are rendered and edited in the browser. They do not need an external image model and are labeled as demonstrations. This site does not upload sample images for the local demonstration.

When AI replacement is enabled and you choose Replace text, the selected areas, surrounding context, and current and new text are sent to our server and fal.ai’s Qwen Image Edit endpoint. Only the edited areas are pasted back into the original in your browser. A selection that covers most of an image can include most of its content.

We do not keep the input crops. Your replacement text is kept only in a signed-in account’s history. Task metadata, including the provider’s result URL, expires after one hour. We request that fal disable request input/output history storage and expire generated media after one hour. These settings do not guarantee that every provider log is deleted within that time or establish a no-training guarantee. See fal’s data retention controls for the scope of those settings.

Signing in is optional and uses Google. We receive and keep your Google account ID, email address, name and profile picture, plus your credit balance and edit totals.

When you are signed in, each replacement is added to your history: the time, file name and image size, the current and new text of each area, and whether credits were used. After a successful replacement, the finished image (with the watermark, for free edits) is uploaded from your browser and stored in Cloudflare R2. History entries and their images are deleted after 30 days, and you can delete any entry sooner from your account page.

Sessions are kept in a cookie for 30 days. Signing out ends the session on this device.

A random device identifier is stored in your browser’s local storage for free quotas. The server stores hashed device and IP identifiers, edit counts and attempt counts for about 25 hours. Task metadata expires after one hour. Operational logs contain processing duration, provider name, status and billing metadata; they do not contain image content or the words you enter. When enabled, Cloudflare Turnstile receives the information needed to verify each replacement request.

Downloads are created in the browser at the image’s original dimensions. Re-encoding creates a fresh image without copying the source file’s EXIF metadata, including GPS tags. Files you download remain on your device until you remove them.

Try a sample without sending an image to a model, close the editor to discard the current work, and avoid uploading material you cannot share with the configured image provider. Read the acceptable use rules before editing.