What runs where

Everything runs on your machine, and nothing leaves it. The inputs are files you exported yourself from your own account; the outputs are a page on loopback and the files you choose to download. Version one holds no cloud credential of any kind, calls no external service, and sends no telemetry, so there is no place a secret could leak to and no third party to trust. The local Kubernetes variant keeps the same property: the cluster is on your machine, and the admission, network, and identity controls it adds apply inside it.

---