Privacy

The short version: files are read on this computer and written back to it. nothing is sent. There is no server here that could receive a photograph, and the database this site does use holds file names and numbers.

What happens to a photograph

Your browser opens each file from disk, decodes it, writes a new version of it and hands that back to you as part of an archive you choose to save. All of that happens inside the tab. This site is a static export — no API, no route handler, no upload target — so there is no address a photograph could be sent to even by mistake.

What is written down, and where

A long job needs to survive a closed tab, so the state of a job is stored in this browser, on this machine, in a database only this site can read. It contains:

• The rule you chose — the quality position, the long edge, the metadata choice, the skip settings.
• The list of files in the job: each one's name, its path inside the folder, its size in bytes and the time it was last modified.
• What happened to each file already processed: written, skipped or failed, the byte counts, and the reason where there is one.

It contains no image data of any kind. That is not a policy, it is a check that runs before every single write and throws if anything resembling a picture is handed to it, plus a build gate that fails if the code that does the writing ever learns how to. Clearing site data for this domain removes all of it, and losing it costs you a resume and nothing else.

Advertising

Advertising is not yet enabled here: the placements exist in the code, the switch is off, and at the time of writing no advertisement is requested on any page. When it is turned on, the units come from Google’s network, they are requested only after the page has checked which host it is running on, and they sit below the working surface — never inside it, never above it, never beside a running job.

At that point an advertising network would see the ordinary things such a network sees: the page address, your approximate location from your IP address, your browser, and whatever its own cookies already knew about you. It would not see the folder you opened, the names of your files, the rule you chose or anything the ledger shows. None of that is in the page it would be embedded in, and none of it is sent anywhere.

Measurement

Traffic measurement is configured but not yet switched on: the site holds a placeholder where the measurement identifier goes, so at present no third-party script is requested on any page of it. The intended arrangement, when it is enabled, is a cookie-free counter on this domain’s own property that records page addresses, referrers, rough geography and browser versions, and builds no profile of anybody.

What will not change either way: nothing about the contents of a job can reach a measurement service, because nothing about the contents of a job leaves the tab.

Children, accounts and email

There are no accounts, no sign-in and no way to give this site an email address, so there is nothing here to delete and nobody to write to you. The site is not directed at children and collects no personal information from anyone.

Changes

If this ever changes — if some future feature genuinely needs a server — it will be stated here and labelled on the surface before it runs, not mentioned afterwards. A tool that silently starts sending photographs somewhere has broken the only promise it made.