Where do my images actually go?

This is the most common question we get. The short answer: nowhere. The longer answer explains exactly how that works and how you can verify it yourself.

The short answer

Your image files never leave your device. Every edit, filter, crop, compression, and export runs inside your browser's memory using standard web APIs (Canvas, File, ImageBitmap, WebAssembly). Dropmatico does not upload your files to any server, store them in any database, or transit them through any third-party service.

What our hosting provider sees

Dropmatico is hosted on Cloudflare Pages. Cloudflare receives standard HTTPS request metadata when you visit any page on the site: your IP address, browser user agent, referring URL, and the URL path you requested. This is the same metadata every website on the internet collects. Cloudflare retains these logs for up to 7 days for security and abuse prevention, then automatically purges them. Cloudflare never sees your image data, your edits, or your exports. Those happen locally in your browser and never transit Cloudflare.

What we do not load on the page

Today, Dropmatico does not load Google Analytics, Google Tag Manager, Facebook Pixel, or any other third-party analytics or advertising script. We do not load fonts from Google Fonts (we self-host Inter and Ojuju from our own origin). We do not embed social media widgets that report your visits to other companies. The page makes requests to one origin: dropmatico.com. You can verify this in DevTools.

What this means for NDAs and privacy

Because Dropmatico's image-processing engine behaves like a local desktop application from a data-handling perspective, embargoed creative, unreleased product imagery, confidential brand work, and customer-data screenshots all stay inside your environment by default. The data-flow shape is the same as any locally-installed desktop tool: your image data never reaches our servers. Whether that maps to a no-DPA-needed posture under your specific NDA or vendor-review process is your compliance team's call. Share this article and the Privacy Policy page with them so they can confirm against your requirements.

Verify it yourself in DevTools

Don't take our word for it. Open your browser's developer tools (Cmd+Opt+I on macOS, F12 on Windows), click the Network tab, drop an image into Dropmatico, and run an export. You will see only requests to dropmatico.com (the initial page load and its assets), and zero outbound requests containing your image data. Every subsequent edit, preview, and export happens inside your browser with no outbound traffic.

For full policy details

This article is a plain-English summary. The legally binding versions of our privacy practices live in the Privacy Policy and Cookie Policy pages, which detail data retention, lawful basis under GDPR / DPDP / CCPA, and your rights as a data subject. For any privacy or data rights questions, email privacy@dropmatico.com.