01 / Local

Built so your files
stay yours.

Cullibrate keeps originals local and uploads only the finished Gallery JPEGs you deliberately choose to publish. Here is what that means in practice.

AppLocal-first

RAWsStay on your machine

GalleriesExplicit JPEG publishing

UpdatedSep 2026

Local-first by default

Your RAWs, culling work, and local previews stay on your machine. Gallery publishing starts only when you choose photos with completed JPEG sidecars and confirm the upload.

Original file safety

Cullibrate is non-destructive. Originals are never overwritten and never moved without your explicit choice.

Clear file handling

Every ingest, copy, and export is explicit. You choose open-in-place or copy-from-card before the first frame loads.

Private Gallery delivery

Published Gallery JPEGs are stripped of sensitive metadata. Cloudflare Workers, Durable Objects, and private R2 storage own upload and delivery; Convex keeps only a thin aggregate control record.

02 / Facts

The short version.

Account use: Access, billing, and thin Gallery ownership records
Cloud storage: One scrubbed source plus four responsive JPEGs per published photo
Builds: Code-signed for macOS Apple Silicon
Gallery deletion: Access revokes immediately; recovery copies clear within seven days