[ectopod]

Yes, so I assumed it is running on the client, but for all I know they could be encrypting the message and sending an image hash to Facebook.