Privacy

Last updated: August 2026.

The short version

Your images never leave your device, because there is nowhere for them to go. This site is a set of static files; every tool — including background removal and face detection — runs inside your browser using WebAssembly and WebGPU. We do not have accounts, we do not have image storage, and we could not read your photos even if we wanted to.

How to verify this instead of trusting it

Open your browser's developer tools (F12 or right-click → Inspect), select the Network tab, and use any tool on this site. You will see requests for our own code — scripts, styles, WebAssembly modules, and on first use of the ML tools a model file — and none containing your image. Alternatively: load a tool page, disconnect from the internet entirely, and keep working. Static pages cannot phone home while offline.

What runs on your device

Decoding (including HEIC via a WebAssembly decoder), resizing, compression, format conversion, EXIF parsing and removal, PDF assembly and rendering, and machine-learning inference. The background remover downloads an openly licensed model (~44 MB) once, on your first use, and caches it in your browser; afterwards it works offline. Face detection for redaction and ID-photo measurement uses small models (0.2–3.5 MB) the same way.

What we store

On your device only: your light/dark theme preference, and the browser's own cache of our code and model files. We never write your images, filenames or edit history to any form of storage — close the tab and the work is gone. There is no chat-style history, no "recent files", no cloud sync.

Analytics

We use privacy-preserving, cookie-free page analytics (page views and Core Web Vitals only) to know which tools are used and whether they are fast. No image data, no fingerprinting, no cross-site tracking, no advertising identifiers from us.

Advertising

Content pages may in future carry advertising to fund the site; the editor surface never will. If and when ads are enabled, they will be clearly labelled, kept away from every canvas and control by a fixed clearance, and governed by a consent dialog that gates ads only — every tool works identically whether you consent or not. This paragraph will be updated before any ad is served.

The one honest caveat

"No upload" describes this site's architecture, not your browser's extensions or your operating system. A browser extension with page access can read what you load into any website, including this one. If a photo is genuinely sensitive, a private browser window with extensions disabled is good practice everywhere — here included.

Contact

Questions about this policy: privacy@iphotoeditor.com.