Prove it yourself
Do not take our word for it. Watch the network while you use the tool.
In Chrome, Edge or Firefox on a computer
- Open any document page, for example /passport-photo/australia.
- Press F12 (or Ctrl+Shift+I, Cmd+Option+I on a Mac) and open the Network tab. Tick Preserve log.
- Choose a photo, adjust it, and download the free preview and a paid file if you have a licence.
- Look at every request. You will see:
- page assets from this domain (
/_astro/…,/sw.js) - the MediaPipe runtime from
cdn.jsdelivr.netand two model files fromstorage.googleapis.com(the first time only; afterwards they come from the cache) - on the background remover: a model file from this site (
/models/modnet-quantized.onnxor/models/u2netp.onnx) and the ONNX Runtime WebAssembly file fromcdn.jsdelivr.net, the first time only - a
POSTtoapi.lemonsqueezy.com/v1/licenses/validateonly when you activate a key or the site re-checks it; its body is the key alone
- page assets from this domain (
- Filter by Img or sort by size: there is no upload. No request carries your photo, and no request is larger than a few kilobytes apart from the model downloads, which are downloads (responses), not uploads.
- For a stronger test: once the models have loaded, switch the Throttling dropdown to Offline and keep using the tool. It still works, because nothing needs the network.
On a phone
Turn on aeroplane mode after the models have loaded once. The tool, checker and downloads continue to work. That is only possible because the processing is local.
The complete list of hosts
cdn.jsdelivr.netstorage.googleapis.comapi.lemonsqueezy.comassets.lemonsqueezy.comapp.lemonsqueezy.comutilitybureau.lemonsqueezy.complausible.io
Our automated test suite asserts that no other host is contacted on a tool page. If you ever see one, email hello@utilitybureau.org with the request URL.