Short version: your photos and API keys stay in your browser. We count visits with analytics. We have no accounts and no upload storage.
Your Photos
The editor runs in your browser. Photos you import are copied into the LightCraft library in your browser’s own storage for this site (the Origin Private File System, or IndexedDB), together with your edits, albums, thumbnails and preferences. Exports and backups are downloads on your device. None of this is sent to us: the Site has no upload endpoint and no storage for photos.
AI Panel
When you use the AI panel, your browser sends what that job needs directly to the provider you selected (OpenAI, Google, OpenRouter, or the custom endpoint you entered), authenticated with your API key: for Auto develop, a JPEG preview of the selected photo with its current slider values and your goal; for Retouch, your prompt and the image you picked. These requests do not pass through our servers. The provider’s privacy policy applies to that data.
Your API key is stored in your browser: in sessionStorage (cleared when the tab closes) by default, or in localStorage if you tick “Remember my key on this device”. “Forget all keys” in the panel deletes it.
Data Stored in Your Browser
Besides the library described above, the AI panel keeps your chosen provider and models in localStorage. None of it is sent to us. You can delete all of it by clearing this site’s data in your browser settings; that also deletes your LightCraft library, so back it up first with File › Back Up Library….
Analytics
We use Umami, which does not use cookies, and Google Analytics, which does set cookies, to count page views and a few anonymous events such as opening the AI panel or running an AI request (provider name and success or error only). Events never include your photos, prompts, file names or keys. Google’s use of this data is described in its privacy policy.
Hosting
The Site is served by Cloudflare, which processes standard request data such as IP addresses to deliver pages and protect against abuse.
If you email us, we receive your address and message and use them only to reply.
Changes
We will post any changes to this policy on this page with a new effective date.