What this site can see
There is no upload endpoint here: your picture is decoded on your own machine, the fill runs there, and closing the tab throws it away — the only thing crossing the network is a model file coming to you.
Your picture
When you open a file here, the browser decodes it into memory in this tab. The boxes you draw are numbers held in the same tab, the fill rewrites pixels in the same tab, and the file you save is written by your own browser from those pixels. There is no upload endpoint on this domain, no server behind it and no account to attach anything to. Closing the tab is the whole of the clearing up.
This is checked rather than asserted. A build-time audit fails the release if any code path under the picture engine or the interface can reach the network or write to storage, which is why the one file on this site that does make a request touches no pixels at all.
The two things that do cross the network
The fill model, only if you ask for it
The structure-aware fill needs a trained network, and that file comes from our model file server, a separate host we run. It is migan-512.onnx: 26,639,447 bytes, MIT-licensed, fetched once and then kept in this site’s own cache bucket on your device. Nothing is fetched until you press a control that names that byte count, the request carries a fixed address and nothing else, and the panel that starts it also holds the button that deletes the file again.
The runtime that executes the network is served from this domain rather than from anywhere else: 13,961,845 bytes of WebAssembly and 24,218 bytes of loader. That is a deliberate choice about who gets to see a request, and it keeps the number of other hosts the tools ever contact at exactly one.
The model comes to your picture. Your picture never goes to the model.
A decoder for iPhone photographs
A HEIC file needs a decoder no browser ships, so about a megabyte and a half of WebAssembly is fetched the first time you actually open one, and never otherwise. Like the model, it is code arriving on your machine rather than a picture leaving it.
Fonts for retyping
When you add new text over a cleared region, the font it uses — one of seven open-licence files of 19 to 130 kilobytes — is fetched from this site the first time you use it. A font file of your own is read from your device, used in this tab and never sent anywhere; the words you type are never sent or stored either.
Measurement
The counter chosen for this site is Cloudflare Web Analytics: cookie-free, on this domain’s own property, and only when the page is served from imagetextremover.com itself. This build does not carry its token yet, so the script is not loaded and nothing about your visit is counted.
When the token is added, this paragraph changes in the same release: it will say what the counter sees (the page address, the page that sent you, browser, country, load time) and what it never sees (your picture, its name, anything in the frame). A build gate fails if the prose here and the configuration disagree in either direction.
Advertising
There is no advertising on this site. No advertising script is loaded and no advertising network is told anything about your visit.
What is stored on your device
Two things, and only if you ask for them. The fill model and the runtime that runs it, in a cache bucket named for this site — the panel that downloads them holds the control that deletes them, and clearing site data in your browser removes them just as well. And any region template you save: a name and four fractions of the frame, in this browser’s local storage, with a control beside it to forget it. No cookies are set by this site, nothing about your pictures is written down, and no history of what you have opened exists anywhere — including here.
Getting in touch
There is no account and no database here. The contact page is the one place you type anything about yourself: when you press its send button, the name, email address and message you entered, plus this site’s name, are posted to a Google Form and kept by Google under its own terms. Nothing is sent while you type or when the page opens, no picture goes with it, and nothing else on this site talks to Google. If something on this page turns out to be wrong, that is the place to say so.