Privacy

A picture you open here is decoded, encoded and measured by the browser tab it is open in. It is not sent anywhere, because there is nowhere to send it: this site is a set of static files with no server behind them and no endpoint that accepts data. Close the tab and every copy the page made is gone with it.

The file is read from your disk by the file picker, the clipboard or a drag. Its first bytes are examined to work out what it is. It is decoded into pixels, handed to a worker thread, and written into each format you selected. The results are held in memory as blobs and offered to the browser’s own download machinery when you ask for one.

Nothing is written to storage on your device beyond a single flag recording whether you closed the notice about the publisher, which lasts until you close the tab. No picture, no file name and no measurement is stored.

This site uses a cookie-free analytics service that records page views and rough geographic region derived from the network request. It sets no cookie, builds no profile across sites, and receives no information about any file you opened — it cannot, because the page never sends it any.

The property is this site’s own. It is not shared with, or joined to, any other site the same people run.

Advertising is served by Google AdSense where it is enabled. An advertising network sees what any third-party script on any page sees: the address of the page, your IP address, your browser and its language, and whatever it already knows about the browser from its own cookies and its own dealings with you elsewhere. It uses that to choose what to show and may personalise it depending on your own settings and your jurisdiction.

What it cannot see is anything about your picture. The advertising script runs in the page; your file is decoded in a worker and held in memory the script has no access to, and no part of this site ever transmits image data. That is a property of the architecture rather than a promise about behaviour.

Google’s own controls for what it shows you are at their advertising settings page, and they apply here as they do everywhere else it operates.

Accounts do not exist here, which means no sign-in and no address to be lost in someone else’s breach. No picture, thumbnail, dimension, file name or measurement leaves the tab. Nothing about your use of the bench is recorded anywhere that could later be connected to you.

A change that made any of the above untrue would be a change to how the site is built, not a change to a setting, and the build refuses to produce a version of this site in which the image code can make a network request at all. If that ever changes, this page changes first and says what and why.