Privacy Policy

Last updated: August 25, 2026

The short version

Image processing happens entirely in your browser using JavaScript. Your files are never uploaded, transmitted or stored by us. Optional accounts store only sync data and processing history metadata - never the images themselves.

Image processing (always local)

• Image files: stay in your device's memory until you close the tab. No image bytes are ever sent to any server.
• Processing logs: the site itself keeps no processing logs.

Optional account data

If you create an optional account, the following data is stored on the server in an encrypted SQLite database:

• Email address - your login credential.
• Password - stored as a salted scrypt hash; the original password cannot be recovered.
• Session token - an opaque HttpOnly cookie; expires after 30 days of inactivity.
• Sync data - SnapPost queue and Content Studio drafts, stored as JSON. You can delete these at any time via your account page.
• Processing history - filename, tool used, file sizes and metadata labels found. No image bytes are stored.

What we never do

• We never see or store your image files.
• We do not run analytics, advertising or fingerprinting.
• We do not sell or share account data with third parties.
• We do not use cookies for tracking. The only cookie is the session token described above.

Server hosting

The server is hosted on infrastructure the site owner controls. Standard hosting logs (IP, user agent) may exist under the hosting provider's policy. Contact us to request account deletion.

Contact

Questions about this policy: see the contact page.