PhotonLab runs entirely in the browser. It has no server, no accounts and stores nothing outside your own browser. Scene files and share links are parsed by a validator that drops unknown fields and clamps every number before anything reaches the solver.

If you find a way to make a scene file or link do something it should not (run code, read data, crash the tab in a way that persists), please report it privately rather than in a public issue: use GitHub's private vulnerability reporting. I will reply within a week.

Only the latest release is supported.