Ember

Privacy legacy

Decide now what nobody finds later.

Twenty years of photos are sitting in accounts you have not opened in a decade. Some of them were never meant for your mother, your children, or whoever ends up with the password. Ember finds those files across your cloud accounts and gives you three honest ways to settle them — before someone else has to.

No account needed. The demo runs on synthetic images generated in your browser — nothing of yours is touched until you connect something yourself.

How it works

01

Point it at your accounts

Google Drive, a folder on this computer, or a built-in demo library if you would rather see how it behaves before handing it anything real.

02

It looks — here, not on a server

Every file is opened, fingerprinted and judged inside your own browser. The pixels never travel. Ember keeps a name, a size and a fingerprint so it can spot the same photo again in a different account.

03

You decide, file by file

Thumbnails come up blurred until you ask to see them. For each one Ember shows why it was flagged, and you choose: delete it for good, lock it in a vault only you can open, or arm it for later.

04

It proves what it did

Every irreversible act leaves a receipt signed by a key that was made on your device and cannot leave it. Export them, verify them, keep them.

Three honest outcomes

Most tools that promise privacy just move the problem somewhere darker. Ember only offers endings it can actually deliver.

Delete forever

Gone from the account itself, bypassing the trash. Not hidden, not moved to a locked album that a password reset would open.

The vault

Encrypted on your device with a key made from a passphrase Ember never sees and cannot reset. Yours to open, nobody else’s — including ours.

The sunset switch

Keep it while it is yours to enjoy. If you stop checking in — and after a grace period, and an optional trustee’s confirmation — Ember carries out what you already decided.

What we will not pretend

  • Your files are read and judged on your device. Ember has no copy and no way to get one.
  • The classifier can be wrong in both directions. Nothing is ever deleted without you saying so, one file at a time or in a batch you approved.
  • If an Ember server is configured, the only things it ever receives are a heartbeat saying your device is alive and receipts with no file names in them.
  • You can erase Ember from your device completely, in one action, at any time.

The part nobody plans for

Estate planning covers the house, the accounts, the will. It has nothing to say about the twelve photographs you would not want read out at your own funeral. Ember is the piece that was missing.

Want to hear when the hosted version — with check-ins that run whether or not your browser is open — is ready?