Photo editors that do not upload your photos: how to tell
What "online" and "private" actually mean for an image editor, a two-minute test that shows whether a web tool sends your photo to a server, what a privacy page should say, and exactly what Voidcanvas does and does not send.
Beginner6 min readUpdated 27 September 2026Privacy · On-device processing
On this page
Three things "private" can mean
| Claim | What it usually means | What to check |
|---|---|---|
| "Your photos are safe" or "encrypted in transit" | The photo is uploaded, over HTTPS, and processed on their server | The privacy policy: how long they keep it, who processes it, whether it trains a model |
| "We delete your files after 24 hours" | The photo is uploaded and stored for a while | Whether "delete" includes backups and logs; usually not stated |
| "Processed in your browser" or "on your device" | The pixels never leave your computer; only the app code is downloaded | The network test below. If it is true, the test shows nothing leaving |
Only the third is private in the sense most people mean. It matters when the photo is a client's unreleased product, a person who did not consent to a cloud upload, a medical or legal document, or simply yours.
The two-minute test
Test 1: watch the network
- Open the editor in Chrome, Edge or Firefox. Press F12 (or Cmd+Option+I on a Mac) and choose the Network tab. Clear the list with the clear button, and tick the option to preserve or persist the log if it is offered.
- Load a photo into the editor. Watch the list. A request that sends data (POST or PUT) with a size close to your photo's file size means the photo went up. Downloads of scripts, fonts and images from the tool's own domain are the app loading, not your photo leaving.
- Apply an edit: a filter, a background removal, a resize. Watch again. If the edit triggers a send and then a download of a new image, the processing happened on a server.
- Sort by size if the list is long. Your photo is usually the largest thing that leaves, and it is easy to spot.
Test 2: pull the plug
- With the editor open and a photo loaded, set the Network tab's throttling menu to Offline, or switch off Wi-Fi.
- Apply the same edit. A tool that processes on your device carries on. One that needs a server fails, spins, or says it cannot connect.
- Export the result. Local tools export offline too.
What a privacy page should tell you
- Whether image data is sent to a server at all, in plain words.
- What is sent and why, as a list, including analytics and crash reports.
- Whether any third party processes images (AI providers, CDNs that store uploads).
- Whether anything is used to train models.
- How to turn analytics off, and whether the browser's Do Not Track or Global Privacy Control signals are honoured.
- Where your files are stored (their servers, your browser, your disk) and how to delete everything.
A page that talks only about cookies, or only about "security", has not answered the question.
What Voidcanvas sends, and what it never sends
Editing, effects, the AI tools, Studio and every export run inside your browser. These never leave your device: your images, photos, PSDs and PDFs; your designs, layers and text; file and design names; Studio jobs, briefs, references, brands and brand guidelines; fonts you add from files.
| What goes over the network | Why | What it contains |
|---|---|---|
| The app itself | To load the pages and, once installed, update them | Ordinary page requests |
| Web fonts from Google Fonts | So text layers can use fonts such as Inter or Playfair Display | A request for the font family by name. No text, no design |
| AI model files, first use only | Remove background, Select subject, Object select, Remove object and Expand with AI fill run on your device and need their model downloaded once | A download of the model from public hosts (jsDelivr and Hugging Face). Your image is not sent |
| Anonymous usage counts | To know which tools get used and what breaks | Event names and small settings such as a file type or a preset name. Never images, file names, text or layer content. Off in a private session or when your browser sends Do Not Track or Global Privacy Control |
| Feedback and bug reports, only when you press send | So you can tell us something | What you type, plus device and browser context |
You never need an account. If you make one, it syncs interface settings, encrypted on your device before they are sent, with a key only your devices have. Teams share the client brands and jobs you choose, encrypted with the team's key. Review and delivery links for clients are encrypted the same way, with the key in the link itself. What Voidcanvas sends and what stays on your device is the full list and stays current with the app.
- Run the two tests above on Voidcanvas. Open the Editor, load a photo, remove its background, export a PNG, then go offline and do it again.
- To switch off usage counts, open Help, Your privacy, and turn off Share anonymous usage counts.
- On a shared computer, start a private session: nothing is written to this browser and Delete all my data clears everything Voidcanvas stored.
- To work with no connection at all, install it as an app or use the desktop app.
Does an online photo editor upload my photos?
Most do: the image is sent to their server, processed there and sent back. Some process entirely in your browser. The only reliable way to know is to watch the Network tab while you load a photo and apply an edit, and to see whether the edit still works offline.
Is HTTPS enough to make an upload private?
HTTPS protects the photo on the way to the server. Once there, the service has it, and what happens next depends on their retention, staff access, third-party processors and training policies. "Encrypted in transit" is not the same as "never uploaded".
Why does a local tool still need the internet the first time?
To download the app, its fonts and any AI model it uses. Those are the tool's own files coming down, not your images going up. After that first load, a local tool works offline.
Can I use Voidcanvas for client work under an NDA?
The images, designs, briefs and brands stay on your device, and the list of what is sent is published. Read it, run the two tests yourself, and switch off usage counts if your agreement requires it. For the strictest cases, use the desktop app offline.