The bit that decides everything
Every tool runs in the browser. Your file is opened by the page you already have loaded, worked on there, and handed back — it is never sent anywhere, because there is no server-side step to send it to.
That one decision writes most of the rest of the product. There are no uploads to queue, no storage to pay for and no retention policy to argue about, so the tools can be free and can stay free. It also means the privacy claim on the front page is a description of the architecture rather than a promise about our conduct — a thing a visitor can verify by watching their own network tab.