Privacy architecture
Browser photo-editor privacy: what local processing means
“Runs in your browser” is not automatically “never uses the network.” Separate image pixels from app assets, accounts, billing, and aggregate measurement.
The processing boundary
Kalar decodes and renders imported media in the browser runtime without uploading it to a rendering server.
Network activity that remains
The app may fetch code, LUT resources, account state, billing data, and analytics scripts. Those requests should not contain pixels, filenames, masks, edit state, or camera metadata.
How to verify
Clear the browser network log, import a non-sensitive test image, edit, and export. Inspect request payloads and destinations; repeat after sign-in.
Limitations
Local processing does not protect a compromised device, malicious extension, shared OS account, or untrusted download.