In short
- Convert, Resize and Passport photo work on your device. Your photos are never uploaded.
- Remove background sends a small copy of your photo to our server, which sends back the cutout and doesn't keep the photo.
- There are no accounts, no cookies and no ads.
- We count visits with Umami, which uses no cookies and collects no personal data.
Convert and Resize
Convert and Resize run entirely in your browser. Your photos are opened, edited and saved on your phone or computer, and are never sent to us or anyone else.
Passport photo
Passport photo also runs entirely in your browser, including finding your face. The first time you open a photo there, your browser downloads a face detection model (about 12 MB) from this site. Your photo, the crop and the print sheet stay on your device and are never sent to us.
Remove background
The AI model that finds the subject runs on our server, so Remove background works like this:
- Your browser makes a copy of your photo at most 1024 pixels wide or tall and sends it to api.photoeditweb.com over an encrypted connection. On the way it passes through Cloudflare, which carries all of this site's traffic.
- The server finds the subject and sends back the cutout's shape (a black-and-white mask). The photo and the mask are only held in memory while this happens, and are gone as soon as the answer is sent. Neither is ever written to disk or to a log.
- Your browser applies the cutout to your full-size photo. The original and your download stay on your device.
The server's own log has one line per request: the time, the address requested (such as /v1/background-mask), whether it worked and how long it took. It doesn't include your IP address or anything about your photo.
Server logs
Like almost every website, this one keeps standard access logs. Cloudflare, which serves the site, and Nginx, the web server in front of our background-removal server, record each request: your IP address, the time, the address requested and your browser's name and version. We use them only to keep the site running and to stop abuse. Nginx also uses your IP address, in memory, to limit how many photos one visitor can send per minute.
Analytics
We use Umami Cloud to see how many people visit and which tools they use. It uses no cookies, doesn't store your IP address and can't tell who you are. It records each page view with the site you came from, your browser, operating system, type of device, screen size, language and country.
We also count these events. None of them includes your photo, its name or anything in it:
- A photo was opened, in which tool, and its file type (such as HEIC or JPG) or, in Convert, how many photos.
- A download was made, in which tool, its format and, in Convert, how many photos.
- A passport photo or print sheet was downloaded, and for which document (such as US passport).
- A background was removed, or removing it failed, with the error message shown on screen (such as “The server is busy”).
- The Feedback link was clicked, and on which page.
Feedback
The Feedback link opens a form on Tally, a separate service, in a new tab. Nothing from Tally loads until you click it. The form is told which page you came from, and whatever you type goes to Tally and to us. Tally's own privacy policy applies to the form.
Cookies, accounts and ads
This site doesn't set cookies or store anything in your browser, has no accounts and shows no ads. If we add ads, we'll update this policy before they start.
Changes to this policy
When this policy changes, we update it here and change the date at the top.
Contact
Questions about your privacy, or a request about your data: email [email protected].