Your files never leave this device. The STRIP Engine runs entirely in your browser — purging, classification, and PII scanning all happen in memory and in a Web Worker. There is no upload endpoint, no cookies, and no analytics.
One exception: if a photo contains GPS coordinates and you open Inspect, the map tiles are loaded from OpenStreetMap. That is the only third-party request this site can make, it only happens for photos that carry location data, and only the coordinates already inside your own photo are used.
Server-side sanitization belongs in your own infrastructure. Use
@filestrip/worker on the Cloudflare Worker that owns your
storage bucket — the browser is not a trust boundary.