All signature editing happens in the browser. Draft configuration is stored in localStorage and can be deleted by the user. No signature data is sent to project servers. Public HTTPS images are loaded from providers selected by the user. Reassess this model before adding analytics, accounts, forms, or any remote service.