Privacy policy

Your photo

Photos are opened, filtered, pixelated and exported entirely in your browser. No photo is uploaded to a server and none is stored there.

Your photo and settings are saved only in this browser on this device. The photo is never uploaded to our servers.

The saved work sits in your browser own storage (IndexedDB) so your last photo comes back when you reopen the app, or after sign-in or payment. It is kept for 30 days after your last change, and is removed the moment you start fresh, open another photo, or click "Clear saved work" in the account panel.

Your settings — pixelation, palette, selection, filter, LEGO colors, view — are kept alongside it for the same reason, so you can come back to them.

Account data

If you sign in, the app stores your email address so it can show the project passes you bought. No card details are stored.

Signing in is optional at every step: photos up to 48 × 48 pixels export in every format without an account, and a project pass can be bought and used without one.

Project passes

To unlock the large exports for one photo, the app computes a SHA-256 hash of that photo file in your browser. Only the hash and a project name are sent to the server and saved with the pass — never the photo, and a hash cannot be turned back into a picture.

A pass record holds the photo hash, the project name, the purchase date, the expiry date and the Stripe payment and Checkout session ids. When you are signed in it also holds your account id, and the email address Stripe collects for the receipt. It never holds card details.

A pass bought without signing in has no account attached. So that it keeps working, the app stores its Stripe Checkout session id and the photo hash in this browser own storage. That reference is only sent back to the app server to confirm the pass, and it holds no photo, name or email.

Payments

Payments are handled by Stripe, which processes your card details and sends you a receipt by email for each payment.

Stripe receives your email address and the details needed to charge and bill you. See Stripe privacy policy for how it handles that data.

Donations

Donations are optional and open a separate donation page run by its provider, which handles the payment under its own privacy policy. The app does not receive or store anything from a donation.

What is not collected

• No photo is uploaded, shared or analysed outside your browser.
• No advertising, advertising cookies or third-party trackers are used.
• No contact address is printed on exports; emailed queries go to the address behind the "Email us" button.

Your choices

You can clear the saved photo and settings at any time with "Clear saved work" in the account panel, the "Start fresh" button beside the preview, your browser site-data controls, or by opening another photo.

Saved work older than 30 days is discarded automatically.

To have your account details deleted, use the "Email us" button and ask.