Local image processing
By default, 17TooL does not receive source images, output images, or filenames.
Account data
Registered accounts store a normalized email address, password hash, verification state, session digest, and necessary audit events. The server does not store plaintext passwords, raw session tokens, or email tokens.
Optional tool history
History is off by default. When enabled, it records only the tool identifier, item count, result status, time, and allowlisted settings—not source text or images.