Privacy

Your photos

They are read in your browser and stay there. They are not sent anywhere, not stored, not logged, and not held in memory beyond the tab. Closing the tab is the whole deletion process.

This is enforced rather than promised. The tool runs in a sandboxed frame served with the HTTP header:

Content-Security-Policy: connect-src 'none'

That instruction tells your browser to block every outbound request that frame could make — fetch, XMLHttpRequest, WebSocket, and beacons. It applies to all code on the page including code I might add later by mistake. You can verify it: open your developer tools, select the Network tab, and drop in a photo.

The frame is also sandboxed without allow-same-origin, which means it cannot read this page, its cookies, or its storage.

What is counted

Nothing, currently. No analytics is configured on this site, so there is no page-view counting of any kind. If that changes it will be cookieless, and this page will say exactly what it records before it records it.

The one thing that leaves your browser, if you ask

When a photo contains coordinates, the tool shows them as text and offers a button that opens OpenStreetMap in a new tab. Pressing it sends those coordinates to OpenStreetMap. Nothing is sent unless you press it, and the warning sits next to the button.

There are no embedded map tiles anywhere on this site for the same reason — loading a tile would announce a photo's location to a tile server without anyone choosing to.

Email

If you type an address into the form under a result, it is used to reply to you about this tool and the Mac app. It is not sold, rented, or used to build a profile. Unsubscribing is a reply. If you never type an address, no address is collected.

What is not here

• No accounts, and no way to make one
• No advertising, and no third-party ad or tracking scripts
• No cookies set by this site
• No uploads, no server-side processing, no photo storage