Privacy notice

Photos are not uploaded by default

Everything you do to a photo here happens inside your browser: reading, cropping, covering fields and watermarking in the ID copy watermark, decoding and converting in HEIC to JPG, converting and resizing in Image converter, adding text and covering areas in Blur, pixelate or add text, and adjusting, blurring and layering in Photo Editor. Apart from Photo Editor cloud projects and any screenshot you attach to a problem report and send, photos are never uploaded, and they are not written into browser storage. Both exceptions are optional and only happen when you press the button yourself: an editing project is uploaded only after you sign in with Google and press "Save here" (see "Photo Editor cloud projects" below), and a screenshot you chose to attach leaves only when you press send on Pocketool’s problem report page (see the "Report a problem" item in the list below).

• The photo stays in this tab’s memory only. Closing or reloading the page discards it (unless you saved the editing project to the cloud, or sent it as a screenshot with a problem report).
• For the ID copy watermark, Blur, pixelate or add text, and Photo Editor, the downloaded or shared image is redrawn from scratch and carries none of the original capture data (EXIF): no timestamp, device model or GPS location.
• HEIC to JPG handles capture data the way you choose: by default it removes the GPS location and keeps the rest, or it can remove everything or keep everything. PNG output carries no capture data.
• Image converter keeps capture data only when a JPG is converted to JPG, handled the same way as HEIC to JPG (GPS location removed by default). Everything else it converts carries no capture data.
• A signature or logo image you add is used in the browser only and is not uploaded.
• When you share, your device hands the file straight to the app you pick. It does not pass through this site.
• In the ID copy watermark, "Print on A4" lays the sheet out in your browser and hands it to the browser’s own print function. The photo is not uploaded.
• "Report a problem" at the bottom of each page opens Pocketool’s problem report page in a new tab. It is not one of this site’s tools: only when you press send there does it pass what you filled in, and any screenshot you chose to attach, to the site owner. Opening it puts only this site’s name and the path of the page you were on into its address (nothing after ? or #), so the form is filled in for you. See Problem reports in the Pocketool Privacy Policy.

Browser storage (localStorage)

So you do not have to set things up again next time, this site remembers your watermark styling in your browser: font, bold, colour, opacity, angle, size, arrangement, tile spacing and outline. HEIC to JPG remembers your choice of output format, JPG quality and photo details; Image converter and Screen recorder remember nothing. The site also remembers the language you last switched to.

The text you type (recipient, purpose, date), your photos and file names are never stored. These settings stay on your device and are not sent to this site. Clearing site data in your browser removes them.

HEIC to JPG

HEIC is decoded by your own browser or operating system; the site does not download a separate decoder. While converting, no photo, file name or capture detail is sent to any website.

Beyond page views, HEIC to JPG records only two things: the output format (JPG or PNG) and photo details option chosen when a batch finishes, and, when this device cannot decode HEIC, the browser family (such as Edge or Chrome) and the step where decoding stopped. It never records photo counts, file names, sizes or photo content.

Image converter

Reading, decoding, resizing and saving all use your browser’s own image features (canvas); the site does not download a separate converter or hand your images to any other website. No image, file name or capture detail is sent anywhere or written into browser storage, and this tool does not remember any setting in your browser.

Beyond page views, Image converter records only one thing when a batch finishes: the output format (JPG, PNG or WebP), how images were resized (not at all, by longest side or by percentage), whether "Compress to a size" was on, and the photo details option. It never records image counts, file names, original formats, dimensions, the size you entered or image content.

Screen recorder

Screen, camera and audio recording and trimming all happen in your browser. Until you press Start, this tool does not use your screen, microphone or camera; after that, your browser asks which screen to share and whether to allow the microphone and camera, and you can withdraw the permission in your browser’s site settings at any time. What you record stays in this tab’s memory: it is never sent to a website or written into browser storage, and this tool does not remember any setting in your browser. The file you download is your own.

Trimming, audio-only export and tidying up a WebM file download the open source Mediabunny library from this site to run in your browser; your recording does not leave your device because of it. Beyond page views, this tool records only two things: on download, the mode (screen, camera only or microphone only), the downloaded format, whether you trimmed, whether the webcam bubble was on and whether it was audio only; and when recording fails, the mode, which source failed (screen, microphone or camera) and an error code. It never records recording length, file size, device names, which window you shared, or any picture or sound.

Blur, pixelate or add text

Reading the photo, adding text, covering areas and writing the file all happen on a canvas in your browser. The photo, the text you type and the file name are never sent to any site. This tool remembers no settings in your browser.

Mosaic, blur and solid replace the pixels in the selected area with newly calculated colours before the file is written, so the download hides no copy of the original and has no layer to peel away. Solid paints the whole area black. Mosaic and blur keep averaged colours, so large text at a low strength may still be readable; for ID or phone numbers, use solid. Beyond page views, this tool records one thing only: the output format you chose when you pressed download (PNG or JPG). It records no file names, sizes, text or number of covered areas.

Photo Editor (online photo editor)

Reading the photo, adjusting, blurring, painting, combining layers and writing the file all happen in your browser: the picture is drawn on a canvas and the heavier maths runs in a background thread of your browser (a Web Worker), with the data passed only within this tab. Unless you use cloud projects, the photo, its layers, the text you type and the file name are never sent to any site and are not written into browser storage. This tool remembers no settings in your browser.

The blur here is for looks and is not guaranteed to make anything unreadable; to hide personal details, use Blur, pixelate or add text. Beyond page views, this tool records two things only: the output format you chose when you pressed download (PNG, JPG or WebP), and each sign-in, save, open or delete in cloud projects. It records no file names, sizes, text, number of layers or account details.

Photo Editor cloud projects (Google sign-in)

Photo Editor has optional cloud projects, so you can save an editing project and carry on later on another device. If you do not sign in, none of this is used and nothing is sent.

• When anything is uploaded: only after you sign in and press "Save here" in Cloud projects. There is no automatic upload.
• What is stored: the pixels of the photo and each layer, masks, text and shapes, adjustment settings, your last few undo steps, a small thumbnail and the project name you choose. No capture data (EXIF) from the original photo and no file name.
• Your account: we keep only your Google account ID (a number), not your email, name or profile picture.
• Where: a Cloudflare D1 database (your account and project list) and Cloudflare R2 storage (project contents). Nothing is public and there are no sharing links; only you, signed in, can read your projects through this site.
• Limits: up to 3 projects per account, 50 MB each.
• How long: after 180 days without use (signing in, saving, opening or listing projects) your account and all its projects are deleted automatically. A sign-in lasts 30 days. Unfinished uploads are deleted after 24 hours.
• How to delete: delete a single project in Cloud projects, or press "Delete account and all cloud projects" to delete your account and every project right away. Deleted projects cannot be read back; the stored files are removed immediately, or at the latest in the next daily clean-up.
• Cookies: after you sign in, this site sets two cookies used only under /pixel-smith. One holds your sign-in (HttpOnly, a random string; the server stores only its hash). The other is a "signed in" flag with no identity in it, which tells the page whether to load your project list. Both are cleared when you sign out or delete your account.

Google sign-in: Google's sign-in button is loaded from accounts.google.com only after you press "Sign in with Google", and Google then receives your IP address and browser details. For how Google handles this data, see the Google Privacy Policy.

Fonts (Google Fonts)

Page fonts, watermark fonts and the text fonts in Photo Editor are served by Google Fonts. When your browser downloads a font, Google receives your IP address, browser information and the font files requested.

Chinese fonts are split into many small files by character range, and only the ranges on screen are downloaded. Google can therefore infer roughly which character ranges you used, but it does not receive the text you typed.

The name preview in the font picker fetches a small file containing the font name itself (for example "Noto Sans TC"). That string is a fixed font name, never your input. The watermark text is never sent to Google.

For how Google handles this data, see the Google Privacy Policy.

Usage analytics (Google Analytics)

This site uses Google Analytics, on the property shared with Pocketool. It records the events GA measures automatically, such as page views, scrolling and time on page, plus how often an image is downloaded, shared, copied or printed on A4. It never records watermark text, file names, the document type or image content. The extra events recorded by HEIC to JPG, Image converter, Screen recorder, Blur, pixelate or add text, and Photo Editor are described in each tool’s section above. Page views and load times on every page are also counted by Cloudflare Web Analytics; see the Cloudflare section below.

Google Analytics uses cookies and estimates a rough region from your IP address. You can block cookies in your browser or install the Google Analytics opt-out add-on.

Cloudflare (server logs and Web Analytics)

This site is hosted on Cloudflare. As on any website, Cloudflare processes connection information such as IP address, browser type, requested URL and time, for security and operations. Apart from editing projects you save to the cloud and any screenshot you attach to a problem report and send, photos never travel over Cloudflare connections (Pocketool’s problem report page is also hosted on Cloudflare; for how it handles screenshots, see the "Report a problem" item in the list above). The cloud projects code has Cloudflare request logging (Workers Logs) turned off and does not log project contents. For details, see the Cloudflare Privacy Policy.

Cloudflare also adds the Cloudflare Web Analytics script to every page as it delivers it. The script sends Cloudflare the page URL and the referring page (both without anything after ? or #), browser information, and performance data such as load times and memory use, to count page views and measure page speed. According to Cloudflare, it does not use cookies or other browser storage such as localStorage, and does not track individuals by IP address or user agent. Your photos, the text you type and file names are never part of this data.

Camera, microphone and screen sharing

The "Take photo" button opens the camera app built into your phone and hands the resulting picture to this page; it does not ask for camera permission. Only Screen recorder asks, through your browser and after you press Start, for permission to share your screen, microphone or camera, and it turns all of them off when you stop, cancel or leave that page. This site never uses the camera, microphone or screen in the background.

Contact

If you have any question about this notice, reach us through the Pocketool contact page. If this notice changes, the last updated date at the top of this page changes with it.

Language preference

When you switch language, your browser stores the choice under pixel-smith:locale so you can find your way back to the same version. The site never redirects you automatically based on it, and the value is never sent anywhere.

No language preference is stored right now.

Clear language preference