Last updated
Privacy
The short version: by default your files never leave your device; cloud processing is something you choose per run, and images sent to it are processed in memory and immediately discarded; accounts are optional; we don't track you. The rest of this page explains exactly what that means.
What we collect
Without an account: nothing that identifies you. EditorsTab has no analytics product embedded in it and sets no tracking cookies. If you use cloud processing while signed out, a random identifier cookie (containing no personal information) counts your daily allowance.
With an account (optional): your email address, your name if you give one, and your plan. If you sign in with Google, we receive your name and email from Google — nothing else. We never sell or share any of it.
Your images, audio and text — on-device mode
By default, and always when the processing switch is set to "On device", every editing tool runs entirely inside your browser. When you choose a file, it is read from your device into your browser's memory, processed there, and handed back to you. It is never transmitted to us or to anyone else.
You can confirm this yourself in two ways: open your browser's developer tools and watch the network tab while a tool runs, or disconnect from the internet once a tool has finished loading its model — everything continues to work.
Cloud mode — what happens when you choose it
Each tool has a visible processing switch. If you set it to "Cloud" (or leave it on "Auto" before a model has downloaded), the file you are editing is sent over an encrypted (HTTPS) connection to our own processing server, processed in memory, and the result is sent straight back.
- Your file is never written to disk on the server and never logged — the server's logs contain sizes and durations, not content.
- It is deleted from memory the moment your result is returned. There is no queue of stored images, no backup, no copy.
- Nothing you process is ever used to train any model, in either mode.
- Cloud runs are counted against a daily allowance (per account, or per the anonymous cookie above). The count is a number — it contains no image data.
My Files — storage you explicitly ask for
PRO accounts can choose "Save to My Files" on a result. Only then is a file stored: it is kept in our storage (Cloudflare R2, or our own server when R2 is unavailable) under your account, visible only to you, until you delete it. Deleting a file removes it permanently. Nothing is ever saved without that explicit action.
What is stored on your device
- AI model files. The first on-device use of a tool downloads its model into your browser's Cache Storage so later runs are instant and work offline. These are ordinary public model files and contain nothing about you. You can inspect and remove them on the Account page, or by clearing the browser's site data.
- Your theme and processing-mode choices. Kept in local storage so your next visit behaves the way you left it.
- Assistant conversations. If you use the built-in assistant, your chat history is kept in your browser's local storage. It is stored only on your device.
- Session cookie. Only if you sign in — it keeps you signed in. Plus the anonymous allowance cookie described above if you use cloud processing signed out.
The built-in assistant
When you send the assistant a message, that message and the current conversation are forwarded to Google's Gemini API so a reply can be generated, then streamed back to you.
- It is text only. The assistant cannot see, receive or open your images or audio — they are never included in the request.
- We do not store your messages on our side. They are relayed and discarded.
- Your message is processed by Google under their API terms. Don't type anything into it you would not want to send to a third party.
- Using the assistant is entirely optional.
Anti-abuse checks
Anonymous cloud processing may be protected by Cloudflare Turnstile, a privacy-preserving bot check that involves no puzzles and no tracking cookies. It runs only when you request a cloud run while signed out.
Server logs
The website is hosted on Vercel and the processing server runs on our own infrastructure; both keep standard operational request logs (IP address, timestamp, requested URL) for a limited period as part of running any web service. We use them for nothing else. Rate-limit counters are short-lived numbers per IP and are never joined to any content.
Children
The site is suitable for general audiences and collects no personal information from anyone who doesn't create an account.
Changes
If this policy changes, the date at the top of this page changes with it.
Contact
Questions about any of the above, or a request to delete your account and everything attached to it: hello@editorstab.com.