# Privacy

## Statement

> "Your source image is processed locally in your browser and is not intentionally uploaded to our server."

Do not claim absolute privacy or security. Only claim behavior that has actually been tested.

## Boundaries

The following is prohibited for the primary workflow:

```text
User Image -> Cloudflare API
User Image -> Third-party AI API
User Image -> Cloud Storage
User Image -> Analytics
```

## Intended Flow

```text
User Image
  -> Browser Memory
  -> Local AI Processing
  -> Generated 3D Asset
  -> GLB
  -> User Computer
```

## Tests

### Test A — Image Upload

1. Open browser DevTools.
2. Open Network tab.
3. Select an image.
4. Inspect requests.
5. Confirm the source image is not transmitted.

Expected: No source-image upload request.

### Test B — Server Logs

Expected: No image data.

### Test C — Analytics

Expected: No image pixels or image files.

### Test D — Console

Expected: No source image contents logged.

### Test E — Offline Behavior

After application/model assets are already available, test whether the core local pipeline can continue without network access where technically supported. Document the exact result.