Privacy & Security
Local Assets, Synchronization and Canvas ZIP Backups
Understand local assets, browser storage, synchronization and model requests, and verify that your canvas ZIP backup can be restored.
On this page
How do you choose local assets?
Choose a folder in a browser that supports folder permission; otherwise use the file picker and browser storage. Local copies, server synchronization, uploads and model requests are different operations.
Before clearing browser data, select the canvases in the canvas list and export a .zip. Keep original assets separately and test importing the backup in another environment; browser cache is not a backup.
What happens when you start a generation task?
Assets can be kept in browser-local storage. Syncing or generating may send required data to the backend or model provider. Check deployment, sync and channel settings; unconfigured services are not a security or confidentiality guarantee.
Canvas export creates a .zip containing projects.json, readable linked assets and saved drawing data. Missing assets and remote-only files may not be included. Check the files and test importing before moving devices; complete offline restoration is not guaranteed.
Connect your own API channels and third-party relays
In model-channel settings, enter the Base URL and API key, then configure the protocol, model IDs and required headers from your provider's documentation. Check the image and video modes you need before generating. Paths, resolutions and first/last-frame inputs depend on the connected channel. An adaptation request for an unsupported channel is not a compatibility guarantee.
BYOK supports a custom API endpoint, model key and headers. For OneAPI, NewAPI or another relay, select the OpenAI, Gemini or Claude protocol that matches its actual API, then check model IDs and image/video endpoint support. Not every relay or private protocol works automatically. BYOK model calls have no platform model markup or platform generation-credit deduction; workspace access and provider usage are still billed separately.
Connect only trusted providers and use HTTPS in production. Custom requests are forwarded through the authenticated backend; required prompts, reference assets and credentials take part in the request. Never put API keys, passwords or secret-bearing headers in public canvases, screenshots or support requests.
Frequently asked questions
What should I do before clearing browser data?
Before clearing browser data, select the canvases in the canvas list and export a .zip. Keep original assets separately and test importing the backup in another environment; browser cache is not a backup.
Are my private character concept drawings uploaded to public clouds?
Assets can be kept in browser-local storage. Syncing or generating may send required data to the backend or model provider. Check deployment, sync and channel settings; unconfigured services are not a security or confidentiality guarantee.
How can I transfer my project to a new computer or share it with collaborators?
Canvas export creates a .zip containing projects.json, readable linked assets and saved drawing data. Missing assets and remote-only files may not be included. Check the files and test importing before moving devices; complete offline restoration is not guaranteed.
Can I connect OneAPI, NewAPI and custom headers?
BYOK supports a custom API endpoint, model key and headers. For OneAPI, NewAPI or another relay, select the OpenAI, Gemini or Claude protocol that matches its actual API, then check model IDs and image/video endpoint support. Not every relay or private protocol works automatically. BYOK model calls have no platform model markup or platform generation-credit deduction; workspace access and provider usage are still billed separately.