Security and privacy

Know where your files and text go.

You select PSDs in your browser. Exporting edited text uses Photopea, an embedded third-party editor. AI translation is a separate, optional step that sends text and context through our server to OpenAI.

File processing

Rendering and translation use separate data flows.

The app reads your design in the browser. It does not upload the PSD file to the PSDTranslate server.

Edited exports

PSD and fonts go to the Photopea frame

After your confirmation, the app transfers the PSD, replacement text and all font files added to this session to the embedded Photopea frame using browser messaging. This includes loaded fallback variants and fonts not used by that particular PSD. Photopea returns a PNG to the app; your browser then creates the selected JPG or PNG download.

Unchanged exports

No AI call needed

When no text has changed, the app uses the saved PSD image or supported layers directly in the browser, without opening Photopea or requiring a font upload. Manual edits and exports do not call OpenAI.

AI translation

Selected text goes to OpenAI

When you request AI translation, our server receives the selected text, layer and font names, file name, languages, protected terms and instructions. It sends translatable text, layer names and translation instructions to OpenAI. Source PSDs and font files are not included.

Font imports

Font ZIPs are opened in your browser

Font ZIPs are extracted locally and only supported static TTF or OTF files are accepted. Variable fonts are not supported. The ZIP is not sent to our server or to OpenAI. Accepted fonts remain in the current tab; all added session fonts are made available to Photopea during an edited render.

Optional fallback

Open Sans is served by this site

The bundled Open Sans files load only after you opt in; no external font API is used. Fallback applies only to missing fonts in edited prose text, never to icon, protected or unchanged text layers. It can change letter shapes and wrapping. Review the rendered result.

Extra image tools

Local processing, with one downloader exception

Compress, Convert, Bulk crop and Images to PDF process selected images in your browser. The image downloader sends the public page or image URL you enter to our server, which requests the public page and selected images from the source website. Images return to your browser for conversion and download. The downloader does not bypass logins or send your browser cookies to the source website.

Accounts and storage

Browser files are separate from account records.

The OpenAI API key is used on the server, not provided to the browser.
A small localStorage record remembers the number of free manual exports in this browser for the current day. It stores no PSD content and is not used for advertising or cross-site tracking. If browser storage is unavailable, the allowance is remembered for the current tab session only.
A separate daily localStorage counter is shared by the extra image tools. It stores the day and number of completed actions, not image content or an account identifier. The public downloader also uses temporary server-side safety limits keyed by an authenticated user identifier or a hashed requester IP address. These safety limits are separate from the browser allowance and AI credits.
A separate localStorage record remembers your confirmation to use the embedded renderer. The editor does not save your PSDs or edits as a cloud project; keep your source files and download your results before closing or refreshing the tab.
Source PSDs are not included in the AI translation request.
Clerk handles sign-in and account sessions. Stripe handles checkout and payment details. AI translation and billing require an authenticated account; manual editing does not.
Our Neon database stores account identifiers, contact email when provided, credit balances, subscription and payment-event records. Translation usage records include file names, languages, layer counts, request status and a fingerprint of the request to prevent duplicate credit charges.
The application does not save source text or translated text in its billing database. Text still passes through our server and OpenAI during translation. Hosting, authentication, rendering and payment providers have their own processing and logging practices.

Third-party processing: Photopea states that files opened in its editor are processed on the device. This is Photopea's description, not a claim that the embedded editor makes no network requests or uses no cookies. Review Photopea's privacy policy before processing confidential assets.

Account data: closing the editor or clearing browser storage does not delete account, credit or payment records. For questions about your account data or a required data-processing agreement, contact us before using the service for that workflow.

Cookies and analytics

Optional analytics. Your choice.

You can use the tools without accepting analytics. Choosing analytics is separate from signing in, paying or approving the embedded PSD renderer.

Google Analytics is optional. Its code loads only after you accept analytics; before acceptance, and when you reject it, this app sends no analytics requests to Google, including no cookieless measurement pings.
If you accept, Google Analytics helps us understand visits to the website and may set analytics cookies to recognise this browser across visits. Analytics requests can include browser and device information and reach Google from your network connection. This is not a claim of anonymous processing. Advertising storage and advertising personalisation are not enabled by this integration.
The app sends page-view events only for a fixed list of public pages, using their page path and a fixed title. Query strings, URL fragments and referring URLs are excluded. It does not send PSDs, images, font files, edited text, entered download URLs, filenames or your account email as analytics event fields. Account and sign-in pages are not tracked by this integration.
Your analytics choice is kept in localStorage on this browser for up to six months. When it expires, we ask again. If browser storage is blocked, the choice may only last for this tab session.
Use Cookie settings to change your choice or withdraw analytics consent at any time. Choose Reject optional, or turn off Google Analytics and save your preferences. This does not reload the editor or discard the PSDs and edits in your current tab. Withdrawing stops new analytics from this app; it does not delete data already received by Google.
Clerk account sessions, Stripe checkout and the separately approved Photopea renderer have their own data flows and storage. Rejecting Google Analytics does not turn those services off when you choose to use them.

For details about Google's processing, see Google's privacy policy. For questions about how PSDTranslate uses analytics or handles your data, contact us.

Security review

Have a client-specific data requirement?

Ask about the data flow before sharing confidential material. Custom security arrangements and branded workspaces need a separate agreement; they are not included by default.