Privacy Policy
Short version: the photos and videos you open in the tool never leave your device. We do not upload, receive, see or store them.
Last updated 27 August 2026.
How your photos and videos are processed
All face detection and blurring runs entirely inside your web browser using on-device WebAssembly. Your images and videos are opened locally and processed on your own device. They are never uploaded to our servers or anyone else’s, never transmitted over the network, and never stored by us. We have no way to see the files you work with.
What is stored, and where
The tool keeps a few small values in your browser’s local storage, on your device only, such as a local flag when you unlock Premium for a demo and any API keys you create. This data stays in your browser, is not sent to us, and is removed if you clear your browser storage. We do not use tracking or advertising cookies.
Accounts
The free photo tool needs no account. To open the full editor and to buy or use Premium, you sign in. Sign-in is handled by Clerk, a third-party identity provider that manages your login and stores your credentials on its systems; we never see your password. Once you sign in, we keep a minimal record in our database (Convex): your Clerk sign-in identifier, your email address, and your plan. We use it only to recognise you and to know whether you have Premium. We do not build an advertising profile about you.
Third-party code
The face-detection runtime and model are downloaded to your browser from a public code CDN so detection can run on your device. Only that code and model are fetched; your images and videos are never sent to the CDN or to us.
Hosting and server logs
Like most websites, the pages are delivered by a hosting provider that may keep standard access logs (for example IP address, timestamp and browser type) for security and reliability. These logs are ordinary web-server records and are not linked to the contents of any image or video you process, because those never reach a server.
Analytics
We use DataFast, a privacy-friendly, cookieless website-analytics tool, to understand aggregate traffic such as page views, referring sites and approximate country. It sets no cookies, does not track you across other websites, and does not collect your name, email or any of the images or video you process. The analytics script is loaded from datafa.st.
Payments
Premium is sold and billed through Polar, our merchant of record. When you buy Premium, you enter your card details on Polar’s checkout; Polar stores and processes them, not us, and we never see your full card number. To grant your plan, we store a link between your account and the Polar customer and order (identifiers and status only, no card data). Polar processes this payment data under its own privacy policy.
Children
The tool is not directed at children and does not knowingly collect any personal data from anyone, including children.
Your rights and contact
We never hold your images or video, so there is nothing there for us to access or delete. If you have an account, the only personal data we hold is your sign-in identifier, email and plan; you can ask us to access, correct or delete it, and deleting your account removes it (billing records held by Polar are kept as required by law). Any data stored locally lives on your device and you control it. Questions about privacy, or a request? Email [email protected].
Changes to this policy
As the product grows (for example when payments or optional analytics go live), we may update this policy and will change the date above. The on-device, no-upload principle for your images and videos is core to the product and is not going to change.