Privacy & local processing
File content processing and website hosting are separate. Here is what this implementation does.
Files you select
Image, PDF and diagram operations run in your browser. This application does not upload selected file contents to a processing server. Temporary results and passwords entered for PDF unlocking are held in the current tab. Downloaded files are saved through your browser.
Pages, libraries and hosting
Opening the website sends normal requests to the hosting service, including technical connection information such as an IP address. Libraries, fonts and OCR models may download from the site. Access can be controlled by the hosting platform’s sign-in settings. Local file processing does not mean that loading the website produces no network requests.
Analytics and advertising
With your permission, Google Analytics measures page visits and technical usage information. Analytics does not load until you allow it. File contents, filenames, diagram text, form values and URL query strings are not sent by our measurement code. Google may process connection and device information and use first-party Analytics cookies. Your choice is stored on this device for up to 180 days. You can reject or change your choice using Cookie preferences; rejecting does not limit the tools. Google AdSense ads appear only on pages without file tools (home, tool directories, guides, about and developer pages); ad code never loads on PDF, image, diagram or canvas tool pages. If you accept, Google may use cookies to personalize ads; if you reject, ads are not personalized, although Google may still use limited cookies or identifiers for frequency capping, fraud prevention and aggregate reporting. Ad code cannot reach your files because it is not present on the pages where you open them. Hosting providers and your browser may maintain technical records or caches.
How Google uses data · Google Privacy Policy
LLM handoffs and saved projects
Copying an LLM brief does not send it to a model. If you paste or attach it to another service, that service receives the content you provide. Canvas stores one recovery draft in this browser, including embedded images. You can pause saving and delete the draft in Local draft & privacy. Clearing browser data removes it. Studio still requires manual saving. Download JSON for a durable editable backup.
Optional live AI connection
When you enable the browser assistant, it can read the full current canvas, including embedded images. If you instead pair local Live MCP, the canvas is sent to a local bridge on your computer. Your paired AI client can read it and request changes; its model provider and privacy terms apply. Disconnect to stop sharing. Pairing codes remain in memory and are not included in URLs, analytics or saved drafts.