# Capsus > Capsus is an independent, free, local-first creative canvas and monthly time capsule. Canvases and imported media are saved in the browser without accounts or automatic cloud sync. Optional network features have a server component. ## Privacy and architecture - **Local work**: canvas editing, voice recording and image processing run on the device. AI cutout downloads a self-hosted model, then analyzes photos locally. - **Network requests**: link cards send URLs to Capsus APIs, which query external pages, platforms or intermediaries. Fonts and remote media may also connect directly to providers. Technical connection data, including IP, is processed for delivery and abuse prevention. Capsus does not integrate behavioral analytics. - **Phone transfer**: online signaling uses temporary Redis session storage in production. Photos travel directly between devices over encrypted WebRTC without STUN or TURN servers; the server does not store or relay photos. - **Storage**: IndexedDB, localStorage, sessionStorage and browser caches have different roles. - **Exports and sealing**: `.capsus` copies are unencrypted ZIP archives with data.json, packaged assets and optional readable documents. Sealing is an archival feature, not encryption. No hosted user-canvas retrieval API is provided; this is not a guarantee against access through a compromised device or browser. - **Offline use**: editing works with app resources already loaded and cached. Previews, external resources not already available and initial phone signaling require internet. Export regular backups; browser cleanup can erase local work. ## Links - [Capsus app](https://capsus.app/) - [Full developer context](/llms-full.txt) - [Technical documentation](/docs) - [Markdown documentation](/docs.md)