Privacy Policy

Photos are processed entirely in your browser, including the Pro photo check, whose models are downloaded from this website and run on your device. Photos are never uploaded to our servers, and we never see them.

The editor keeps the dates of your recent downloads in your browser’s local storage, to decide whether to mention Pro. Pro also keeps your photo type and print settings there. None of this is sent to us, and clearing this site’s data removes it.

If you sign in to use Pro, with Google or with an email and password, we store your email address, your name and Google account ID if you use Google, a one-way hash of your password if you set one (we can't read the password from it), when you signed up and last used Pro, when your free trial started, how many photos you saved or printed while signed in and when the first and latest were, how many times you opened checkout, and the state of your subscription (plan, renewal dates, and the customer and subscription IDs Stripe gives us). This is kept in a database hosted by Cloudflare. A sign-in cookie keeps you signed in for up to 30 days.

Before a password is set on an email, we email that address a six-digit code to prove it's yours. These emails are sent by Resend, which handles your email address only to deliver them; we keep a hash of the code for at most 15 minutes. See Resend's privacy policy.

We use your email to run your account, send messages about your subscription, and occasionally ask for feedback. We never sell it or share it for marketing.

Pro is sold through Link, a Stripe company, as our reseller and Merchant of Record. Your card or other payment details go straight to Stripe; we never see or store them. Stripe tells us whether your subscription and payments are active, and Stripe and Link keep the records they need for tax and accounting. See Link’s privacy policy and Stripe’s privacy policy.

The free site shows ads served by BuySellAds, which may use cookies and your IP address to serve and measure them. Pro users don’t see ads. See BuySellAds’ privacy policy. You can also manage cookies in your browser’s settings.

The website runs on Cloudflare, which processes technical data such as IP addresses to deliver and protect it. See Cloudflare’s privacy policy. We don’t use any analytics service.

Account and subscription details are kept while you have an account. Ask us to delete your account and we will, apart from what Stripe must keep for tax and accounting.

You can ask to see, correct or delete the personal information we hold about you by emailing [email protected]. We will reply within 30 days.

The website is not intended for children under 13, and we don’t knowingly collect their personal information. Photos of children made with the editor stay on the device that made them.

We may update this policy. The effective date above shows when it last changed, and Pro subscribers will be told about significant changes.