I'm afraid it's the latter: https://gpuweb.github.io/gpuweb/#privacy-considerations