Private by design. Never uploaded.
What "never uploaded" actually means
nimbril's tools run entirely on your device. When you open a file, it is read into your browser's memory and processed there with Canvas, WebAssembly, and the browser's built-in crypto. The bytes of your document, photo, or video are never sent to a nimbril server, never stored, and never used to train anything. "Never uploaded" is the lead claim; "on your device" is the reason it is true.
Verify it yourself, don't take our word
The fastest test: turn on airplane mode and use any tool. Once the page has loaded, every file operation still completes with no connection at all. For a second check, open your browser's developer tools, go to the Network tab, and process a file: you will see no request that carries your file's contents leaving the page. Verifiability is the whole point. A claim you can check beats a promise you have to trust.
Where the only network calls go
Being honest matters more than sounding pure, so here is the exact picture. A few tools fetch a one-time engine on first use before going offline: the background remover downloads its model, the video trimmer downloads an ffmpeg build, and some tools load web fonts. Separately, signing in and managing a subscription talk to our server. None of these requests ever include your file. After the engine caches, those tools work in airplane mode too.
Redaction that is genuinely irreversible
Most PDF "redaction" draws a black box on top of the page; the text underneath survives and can be copied or recovered by deleting the box. nimbril does the opposite. Redact rasterizes each page to pixels, burns the redaction into those pixels, and rebuilds a brand-new image-only PDF. The original text, fonts, and vectors are never carried into the output, so there is nothing left underneath to recover.
One honest caveat on redaction modes
The black-box mode fully erases what is under it. Blur and pixelate are flattened into the pixels the same way, but on small text a mosaic or blur can sometimes be partly reconstructed, so the tool itself warns you. For anything you truly need gone, such as names, account numbers, or signatures, use the solid black box. We would rather tell you this than let you trust the wrong setting.
What this looks like per tool
The file tools keep your data local end to end: Lift removes backgrounds, Squash compresses images, Convert turns HEIC into JPG, Frame beautifies screenshots, Portrait makes passport photos, Sign adds signatures to PDFs, Redact flattens redactions, Meta strips EXIF and GPS, Encrypt uses AES-256-GCM in the browser, QR generates codes, and Trim cuts video. Poise, the speaking coach, keeps your recordings and history in your browser; note that its live transcription uses your browser's built-in speech service, which on some browsers sends audio to the browser maker, not to us.
A newcomer earning trust the verifiable way
nimbril is new and we are not going to invent stats, badges, or testimonials to look bigger. For regulated and sensitive work, the relevant fact is simple and checkable: the file never leaves your device, so there is no upload to log, breach, subpoena, or accidentally retain. There is a generous free tier with no signup to try, and Pro is $9/month or $69/year for full resolution, batch export, and no watermark. The privacy guarantee is never behind the paywall.