Your photos never leave your device and your designs autosave locally — that part is architecture, not a promise. Accounts exist only to save your plan and, on Pro, your design layouts.
When you add a photo it is opened directly by your browser, drawn locally and never uploaded anywhere. Exports are generated on your machine. The only thing that ever leaves your device is your account record (below) — never your images.
Your in-progress design is stored locally on your machine so a refresh does not lose work. Clearing your browser data removes it completely — we could not recover it even if you asked. Optional Pro cloud sync stores your scene layout (not your photos) in your account.
The editor asks for a free account via Google Sign-In. We store your email, name and plan — that is the entire account record. No third-party trackers, no ad networks, no data brokers.
The only cookie the site sets is your login session. We do not run cross-site tracking or fingerprinting — you can verify this yourself in your browser's dev tools.
Google Fonts loads so your text looks right, and Google Sign-In talks to Google only when you click the button. Nothing about your designs is included in those requests.