Privacy policy

The short version

There is no upload step on this page. Your photograph is read by the browser you already have open, each fix is written there, and nothing is sent, queued or kept.

Every part of that sentence is a property of how the page is built rather than a promise about how it is run. There is no address here that accepts an image, because there is no server behind this domain at all — it is a set of flat files.

What happens to a file you open

1. The browser reads the bytes off your device and decodes them.
2. A working copy is made in memory, held near two thousand pixels on the long edge.
3. Each fix is written to that copy by arithmetic running in a background thread of the same tab.
4. When you save, the same records run again against the full-size pixels and the result is handed to your downloads folder from memory.
5. Closing the tab ends all of it. Unless you turn on Keep my work (below), nothing is written to storage in the browser and nothing is kept.

Keep my work (off unless you turn it on)

Under the tool there is a box labelled Keep my work if this tab closes. It is off by default. When you tick it, the list of fixes and the slider values — numbers only — are saved in this browser's own storage on this device, and the photo itself only if you also tick and the photo itself. Next time you open the same page, it offers Restore or Discard. Unticking the box, or pressing Discard, deletes what was kept. Nothing kept this way is ever sent anywhere.

The optional face finder

If you use the face finder, a model file is downloaded from our model file server and kept in this browser, together with the runtime that runs it, which comes from this site. The photo never leaves the device: the model runs here and only draws boxes. Clear downloaded models, under the tool, removes the file from this browser.

Sharing a photo from your phone

If you add this site to your phone's home screen, it appears in the Share sheet. A photo shared to it is handed to a small script that runs inside your browser, kept for a moment in local storage on the phone, and opened on this page, which then deletes it. The photo goes from your gallery to this tab and nowhere else.

Camera details in a saved file

When you open a JPG and save a JPG, the Save as panel offers three choices for the block of camera details the file carried: keep it, keep it without location, or remove it all. Keep without location is the default, so GPS coordinates are dropped unless you choose otherwise. Orientation is always written as upright, because the rotation is already in the pixels. A PNG is written with no camera details at all.

Measurement

No measurement script ships with these pages today, and no page view is recorded. When counting starts it will be Cloudflare Web Analytics on this domain's own property, which sets no cookies and builds no profile: it records the page address, referrer, country and browser type, never your photograph, its name, its size or anything you did to it. It will run only on touchupphoto.com, not on preview copies, and this paragraph will say so on the day it does.

Advertising

There is no advertising on this site.

Fonts and other requests

Both typefaces are served from this origin, so opening a page makes no request to a font host. The only file the tool ever fetches on demand is the HEIC decoder, and only when a HEIC is opened.

The contact page

The contact page is the one place that sends anything off this domain. When you press its Send button, the name, email address and message you typed go to Google Forms together with the words touchupphoto.com, so the note can be told apart from others. Nothing is sent before that press, and the form loads nothing from Google while you type. No other page here talks to Google.

Children

This is a general-audience utility. The tool asks for no name, no address and no age; the only page that asks for a name is the contact form, and only if you choose to write.

Changes

If the architecture ever changes so that something does leave the device, this page changes in the same commit, and the sentence at the top of it goes first.