Step 01
Load the app shell
HTML, JavaScript, CSS, and other interface assets are fetched so the site can run.
Security
Security follows the same rule as privacy: the image work should stay in the browser.
This page explains the technical boundary around PixelProof. The product still needs network access to load its interface, but the image processing workflow is designed so the selected files stay on the device rather than moving through a remote image service.
HTTPSBrowser APIsNo server processingLocal export
FLOW
Security model
Step 02
Process the image locally
Selected files stay in browser memory and are handled through local browser APIs.
Step 03
Export back to the device
The output is generated locally and downloaded or saved through the browser.
Pillars
The model is intentionally simple.
Last updated March 30, 2026.
Browser-only execution
Image processing is designed to run locally with browser APIs rather than on a server-side image pipeline.
A narrow network boundary
The app still downloads code and static assets so the interface can load, but it is not built to transmit the selected image file itself.
Practical safety still matters
Keeping files local is a strong default, but users should still use HTTPS, updated browsers, and sensible handling for sensitive content.
No-upload proof
The claim is testable in the browser Network panel.
PixelProof still downloads the app shell. The important claim is narrower: selected image files should not be sent to a remote image processing endpoint when users check, resize, compress, or convert files.
1Load the app, open DevTools, and clear the Network panel after static assets finish.
2Select a local test image and run a check, resize, compression, conversion, or PDF workflow.
3Look for upload-style requests such as POST bodies, multipart form-data, or payloads matching the source file size.
4Confirm the output is a blob: URL or browser download, not a server-hosted processed image.
SAFE
Best practices
Local-first is strong, but safe handling still depends on the environment around the browser.
01
Access the product over HTTPS and keep the browser up to date.
02
If a file is particularly sensitive, consider loading the page and then working offline for the edit session.
03
Treat exported files with the same care as the originals because the tool does not manage post-export sharing or storage.
LINK
Related pages
Security explains the architecture, not the full policy set.
Read privacy for data handling, the whitepaper for the technical proof model, and compliance notes for enterprise limits.