Short answer: yes, Photopea is safe for normal use. It is a legitimate image editor that has run in the browser since 2013, and its privacy policy says the files you open "never leave your device." Two things deserve care: the optional AI tools, which are processed by a third party, and unofficial sites that borrow the Photopea name.
"Safe" still deserves a closer look. Photopea is closed-source, ad-supported, and delivered as a website, and each of those comes with a real, manageable trade-off. This guide covers what happens to your files, where the genuine privacy questions are, how to get the real thing, and when an installed open-source editor like GIMP or Krita is the better fit.
Key takeaways
- Photopea processes images locally in your browser tab. Its documentation says it "does not upload any of your files to the internet," and it keeps working offline once loaded.
- AI tools are the exception. Photopea's own API documentation says "some features are done by third parties," naming Magic Replace and Remove BG. Using them sends image data to an outside service.
- You can edit without an account. If you sign up, Photopea stores your name, email and preferences, and its policy says the record is deleted after six months without a login.
- The free tier is ad-supported, and third-party ads are the main everyday privacy consideration. A premium subscription removes them.
- There is no installer to download. The official app is photopea.com, which your browser can also install as a standalone web app.
How Photopea handles your files
This is the question most people are really asking: does my photo leave my computer? According to Photopea's documentation, no. The editor "runs completely in your device," so decoding, layers, filters and exports happen on your own hardware.
You can test this yourself. Load photopea.com, disconnect from the internet, and keep editing. The documentation says that works, and it would be impossible if edits depended on a server.
Local processing has a flip side: nothing is saved for you by default. The privacy policy warns that closing the tab without saving loses your work, so treat Photopea like a desktop app and export often.
If you create an account, Photopea stores your name, email address, a copy of your preferences and, for paying users, payment records. Files only leave your device if you choose a cloud destination: Photopea's own Peadrive storage, or a Google Drive, Dropbox or OneDrive account you connect. The policy says Photopea "never shares your files with anyone."
The exception: AI tools run on someone else's server
Photopea's newer AI features, such as Magic Replace, background removal and image generation, do not follow the local-only model. Photopea's API documentation says "some features are done by third parties" and names Magic Replace and Remove BG among them, served by the AI provider Dezgo.
In practice, the image data those tools work on leaves your device. Photopea's privacy policy, which focuses on your files and account, does not describe how that third party handles it.
That does not make the tools dangerous. It does mean the "files never leave your device" promise covers ordinary editing, not AI features. For anything confidential, such as client work, ID documents or medical images, skip the AI tools and use manual selection and masking instead.
The ad-supported model, explained
Photopea is free to use, funded by ads shown in a panel beside the editor. This is the honest place to focus an everyday privacy discussion, because web ads usually involve third-party scripts and the tracking that comes with them.
Photopea's privacy policy describes only its own preferences cookie and says that record "can not be used to identify a user." It does not cover the ad partners, so assume standard web-advertising tracking applies on the free tier. Our guide to how free apps make money explains why that trade-off is common.
If that bothers you, the premium subscription removes ads and adds extras such as longer undo history and AI credits. We don't quote prices because they change; check the official site for current details. The business model is transparent, which is more than many "free" tools can say.
Is there a safe Photopea download?
Photopea does not publish a separate installer. The official editor lives at photopea.com, and when we checked in October 2026 the site served a standard web app manifest, so Chrome and Edge can install it as a standalone app window with the browser's "Install" option. That is still Photopea's own code, loaded from photopea.com.
Anything else deserves suspicion. Lookalike domains and unofficial "Photopea for Windows" downloads or wrapper apps are not published by Photopea, and nobody outside their makers has vetted that code. Type the address yourself rather than clicking a search ad.
What browser-based means for security
Running in a browser cuts both ways.
In your favor: the browser sandbox. A web page cannot read arbitrary files on your disk, install software or ask for administrator rights, so Photopea only sees the files you choose to open.
There is also no installer to trust, and you always run the current version. That is why Photopea is popular on locked-down work laptops and Chromebooks.
Against you: you load the app again on every visit, trusting that photopea.com serves the same clean code today as yesterday. Any auto-updating desktop app asks for similar trust.
On the record so far, our Photopea Trust Report found no Photopea-specific entries in public vulnerability databases when we reviewed it in July 2026. The limitation is that the code is proprietary and maintained by one independent developer, so outsiders can verify its behavior but not its source. Open-source editors offer a stronger guarantee on that axis, one of the criteria in our methodology.
Photopea vs. installed open-source editors
| App | How it runs | License / model | Where files are processed | Standout strength |
|---|---|---|---|---|
| Photopea | In the browser, no install | Free (proprietary), ad-supported, optional subscription | Locally, except optional AI tools | Excellent PSD and design-file support |
| GIMP | Installed desktop app | Open source | Locally, on your device | Deep toolset, decades of maturity |
| Krita | Installed desktop app | Open source | Locally, on your device | Digital painting and illustration |
All three keep ordinary editing on your own machine. Photopea wins on zero-setup access and PSD fidelity; the open-source pair wins on code transparency and offline-first work.
Our GIMP vs. Krita comparison explains which installed editor suits which job, and GIMP for Photoshop users helps if you are switching.
When to pick something else
For most personal and hobby editing, Photopea's model is reasonable. A few situations justify something else:
- Confidential material. If client work under NDA or an employer policy rules out web tools, use a desktop app. Compliance is about the category of tool, not just its behavior.
- You rely on AI edits. If you need background removal on sensitive images, an offline editor keeps that work on your machine.
- Audit requirements. If "we can read the source" is a hard requirement, only open source qualifies.
Our roundup of the best free photo editors covers the field, and our list of Photopea alternatives labels each option's license model.
The bottom line
In our view, Photopea is safe for normal use: ordinary editing stays in your browser, accounts are optional, and the business model is out in the open. The caveats are closed source, ad tracking on the free tier, AI tools that send image data to a third party, and the need to stick to photopea.com. Features and pricing change, so always check the official site before deciding.
FAQ
Does Photopea keep your photos?
No, not for ordinary editing. Photopea's privacy policy says files you open "never leave your device," and its documentation says the editor runs offline once loaded. Files leave your device only if you save them to a cloud storage such as Photopea's Peadrive, or use AI tools like Magic Replace or background removal.
Is Photopea safe to download?
There is nothing official to download. Photopea runs at photopea.com, and Chrome or Edge can install it as a standalone web app using the browser's own Install option. Be wary of any .exe, "Photopea downloader," or app-store listing that is not linked from photopea.com, because Photopea does not publish those.
Is Photopea legal to use?
Yes. Photopea is a legitimate product that has been publicly available since 2013, free with ads and with a paid ad-free tier. It is not affiliated with Adobe; it is a separate editor that can open Photoshop's PSD format, much as LibreOffice opens Word files. Using the official site involves no piracy.
Can Photopea give you a virus?
The official site is a web app running inside your browser's sandbox, so there is no installer that could carry malware. We found no Photopea-specific entries in public vulnerability databases when we reviewed it in July 2026. The realistic risk comes from lookalike sites and unofficial downloads, so type photopea.com yourself.
Do Photopea's AI tools upload my image?
Yes, they send image data off your device. Photopea's API documentation says some features are done by third parties and names Magic Replace and Remove BG. Its privacy policy does not describe how that provider handles the data, so avoid the AI tools for confidential images and use manual selection tools instead.
Is Photopea open source?
No. Photopea is free but proprietary, so its privacy claims rest on documented, testable behavior and its track record rather than independent code review. If open source is a requirement, GIMP and Krita are the closest free desktop equivalents, and both process files entirely on your device.