Privacy
Marks are applied here. Nothing is sent anywhere.
The short version
Your files stay on your disk. This page reads them, draws the mark, writes new files, and keeps nothing — there is no server behind it for a copy to go to.
Nothing you open is sent anywhere, because there is nowhere for it to be sent. This site is a set of static files on a content network; it has no application server, no database and no endpoint that accepts a picture. That is not a policy that could be changed quietly — a check in the build refuses to publish the site if any code in it starts making a network request with image data, and the whole thing would have to be rearchitected to break the promise.
What happens to a picture you open
| Reading it | The file is read by the browser into memory in this tab. The copy on your disk is never written to, renamed or moved. |
|---|---|
| Working on it | The picture is drawn onto a canvas, the mark is drawn over it, and the result is drawn again at full size when you save. All of that happens in this tab's own process. |
| Large pictures | Above roughly 32 megapixels — 16 on an iPhone or iPad — you are asked whether a lighter working copy is acceptable, because the alternative is a tab that fails silently. The choice is yours and it is remembered nowhere. |
| Saving it | A new file is assembled in memory and handed to the browser's own download machinery. It goes wherever your downloads go. |
| Afterwards | Closing or reloading the tab drops everything. Nothing is written to disk by this page except the file you asked for. |
| HEIC and TIFF | These need a decoder the browser does not have, so a code file is fetched the first time one of them turns up. That request carries no part of your picture — it is a program arriving, not a photograph leaving. |
The one thing that is stored
Saved settings. When you name a set of mark settings and keep them, they go into this browser’s own storage for this site, on this device. They hold the mark description and nothing else: no picture, no logo file, no file name, no identifier for you.
Clearing site data for this page deletes them. A different browser or a different machine starts empty. There is no synchronisation, because there is no account for anything to synchronise to.
Advertising and measurement, as they stand today
No advertising is on this page at the moment. This site is built to carry Google AdSense and the placements were decided long ago, but the switch that renders them is off and the domain is still in review, so nothing third-party loads into any route here and no advertising cookie is set from these pages.
Once Google approves the domain that changes, and it is fairer to describe it now than to spring it on you afterwards. AdSense will fill those placements — below the tool and below the writing, never beside either — and from that day Google sets and reads its own cookies and identifiers to choose which advertisement you see, governed by Google’s policies rather than by anything written here. What it will never reach is your picture: an advertisement lives in a frame of its own, your photograph lives in a canvas in this document, and there is no path between the two. Blocking the bands leaves the tool exactly as it is, before approval or after it.
Nothing about your visit is recorded. There is no analytics on this domain: no beacon script ships with the page, no counter runs inside it, and no tally of visits exists anywhere, because there is no server here to keep one. A cookie-free property was intended for this site and its token was never filled in, so the tag that would have loaded it renders as nothing at all — which is why this paragraph reads the way it does instead of describing measurement that is not taking place.
- No sign-in exists here, so there is no account, no email address and no password.
- No file you open is transmitted, logged, cached or counted.
- Nothing about the mark you chose — the wording, the placement, the opacity — leaves the page.
- No profile is built about you by this site. With the advertising switched off, no third-party identifier is set from these pages at all; once it is switched on, the only ones will be Google's own.
Children, and getting in touch
This is a general-audience utility with no accounts and no data collection of its own, so it does not knowingly hold information about anybody of any age — there is nothing here to hold.
If something on this page is wrong, or you want to ask what happens to a particular kind of file, the parent site credited at the bottom of every page carries the contact details for the people who run this one.