Know where the image goes before pressing Run.

Browser-local tools

The browser File API, Canvas and bundled JavaScript libraries perform the operation in the tab. Source pixels and generated downloads are not intentionally submitted to ImgNimble by these tools.

VPS worker tools

CPU-heavy jobs are stored in a private job directory, validated by MIME/extension/size rules and sent through an HMAC-signed worker request. Results are returned through an expiring signed URL. The supplied hourly cleanup removes worker job directories after the configured retention period.

Paid provider tools

Generative requests require PLUS access, moderation and an explicitly configured provider. Temporary provider input links are signed and short-lived. Provider keys are never exposed to browser JavaScript.

Accounts, analytics and URLs

Member records hold account and credit state. Tool source contents are not placed in URLs. Optional analytics/advertising are consent-gated and disabled by default.

Downloads

Browser outputs are created locally. Worker/provider outputs use private expiring result links. Once a user downloads a copy, the browser’s saved file is outside ImgNimble’s control.