I see random websites that aren't open source saying they are "encrypted, safe", when they obviously aren't! Come on!
I checked it. The image is definitely sent to the server. The OCR does not run on the client side and it's impossible to know what the server does with the image.