Photos stay on this device.
Your photos never leave your device. The only thing we ever receive is two numbers per batch: how many photos and how many locations. No names, no files, no addresses, no cookies.
What the page sends
Your photos never leave your browser. Everything runs client-side. The only network requests this site makes are its own static assets, the on-demand WASM decoders, and one counter POST carrying two integers (images processed, locations stripped). No file bytes, file names, metadata values, or dimensions are ever transmitted. No cookies, no analytics, no accounts.
Yes, it is really private. The page loads, and after that the work happens in your browser with no network calls for your files. The only thing sent anywhere is two integers per batch for the counters: how many photos, how many locations. You can watch it in your browser network tab.
What the page stores
The theme toggle stores your choice, light or dark, in this browser's local storage. Nothing else is stored.
Your originals
No. Your originals on disk are never touched. This reads them, builds new files, and hands you a zip.
What cleaning does not mean
exexif makes a photo neither authentic nor anonymous. It removes metadata, so a cleaned file carries no proof of where it came from, and whatever the picture shows is still in the picture.