Uploaded images are pinned via Pinata and stored as ipfs:// links (not Pinata gateway URLs).
ipfs://
Your private key is never sent to the server. Phantom signs the transaction locally in your browser. Authorities are automatically revoked after minting.