It could be a server running on the local machine serving only requests that come from 127.0.0.1. Then from a user's point of view it is not much different from a "desktop application". You start it up locally and connect to it with a browser running locally.