Privacy

Nothing leaves this room.

Sanctum is an on-device editor. Photos, videos, masks, grades, and exports live in this browser's IndexedDB and memory. There is no processing API, no telemetry, and no content classifier.

Core editing works offline after the app has loaded.
Import never uploads. Export is a local download.
Enhance, upscale, heal, fill, and beauty are local algorithms.
No subject is refused, blurred, or treated differently.
An account is optional and never required to edit.

Return to Sanctum