Privacy on this board

No photograph you place on this board is sent anywhere. The board layout is stored in this browser so you can come back to it, and Clear board deletes it.

Three things on this site reach a domain that is not this one, and each is named here.

• Cloudflare Web Analytics counts page views on the live domain, imagecollagemaker.com, with a cookie-free beacon. It records the page path, the referrer, a coarse country, the browser and device class, and page-load timings. It is never handed a photograph, a file name or anything about the board. Preview copies of the site and local test servers do not load it at all.
• Model files from our model file server, only if you press the control that asks for one on the page about arranging with help. The request asks for a file by name and carries nothing about your board or the photographs on it.
• The contact form, only when you press its Send button: the name, email address and note you typed, plus the words imagecollagemaker.com, are posted to Google Forms so the note reaches the person who runs this board. Nothing is posted before that press, nothing from Google loads while you type, and no photograph is ever part of it.

That is the whole policy. The rest of this page is detail, for anyone who wants it.

What happens to a photograph you open

It is read by the browser into memory, turned into three sizes — a tray thumbnail, a screen copy and, at export time only, the original at full resolution — and drawn onto a canvas. When you close the tab all three are gone. There is no request carrying picture data anywhere in this site, and the build refuses to publish if one appears.

What is written to your browser

• The board itself: width, height, unit, dots per inch and the ground colour.
• Every frame: where it sits, how large it is, its angle, its opacity, its crop window and its place in the stack.
• A label for each photograph: the file name and its pixel dimensions, so a restored board knows which file belongs in which frame.

No pixels. Not the originals, not the working copies, not even the thumbnails. That is why a restored board shows named outlines rather than pictures, and it is a deliberate trade: the inconvenience is real and it is smaller than keeping copies of your photographs on your disk without saying so.

It lives in this browser’s IndexedDB, on this device, under this site’s name only. The Clear board button removes it immediately, and so does clearing site data in your browser settings.

Measurement

Cloudflare Web Analytics measures aggregate use of these pages on a property belonging to this site alone. Its cookie-free beacon records the requested path, referrer, coarse country, browser and device category, and page-load performance. It runs on the live domain only: the page checks the address it was served from before it adds the beacon, so a preview copy or a local test server never makes the request. There are no custom events — nothing about what you did on the board is reported, only that a page was viewed.

The beacon sets no cookie, identifier or cross-site profile. It cannot see the board, any photograph placed on it, the stored project, a model result or an exported collage, because none of those values is passed to measurement code.

The model files, fetched only when you ask

The page about arranging with help offers two small programs. Until you press the control that names one of them in bytes, neither is requested and this paragraph describes something that has not happened. After you press it, one file comes down from our model file server rather than from a public model hub — a request to somebody else’s host would tell them which of this board’s visitors is arranging photographs of people, which is not something worth handing away here.

• Face finder: 229,738 bytes, MIT-licensed. It reports a rectangle and a score for each face it finds, and the board uses the rectangles to decide where a crop window sits.
• Subject finder: 6,163,938 bytes, Apache-2.0-licensed. It marks which pixels of a 192-pixel square belong to a person, so a frame can be drawn without the rest of its photograph.
• The program that runs them: 13.3 MB — 13,986,063 bytes — of WebAssembly, served from this domain, not from anywhere else. It comes down once, alongside whichever of the two you take first.

What is computed from your photographs is rectangles and a coarse per-pixel mark, and both stay in this tab’s memory until it closes. No face template, no descriptor, no hash of a face, no comparison against anything, no identity, no age, no expression, nothing about who anybody is. None of it is written to the board’s storage either — restore a board tomorrow and the readings are gone with the session that made them.

The files themselves are kept in this browser’s Cache Storage, in a bucket named for its version, so the second time you use the feature nothing is requested at all and it works with the network switched off. The panel carries a control that deletes the bucket again. Decline the download and none of this happens: no request goes out, no file is stored, no face is located, and every control on the board works exactly as it did — you place the crop window yourself and the grid generator fills every cell the same way it always has.

Advertising

No advertising runs on this site. No page loads an ad script, and no ad network is told anything about a visit. If that ever changes, this page changes in the same release, before the first advertisement appears.

Children

This site is not directed at children, collects no account information from anyone, and has no way to identify an individual visitor.

Every request this site can make

The whole list, and it is short. Pages, styles, typefaces and scripts from this domain. On the live domain, the Cloudflare Web Analytics beacon and the one report it sends per page view. The program that runs the models, also from this domain, once you ask for a model, and one request per model file to our model file server, once each, after a press. On the contact page alone, one post to Google Forms when you press Send, and never before. There is no ad script, no font host, no tag manager and no error reporter. Open your browser’s network panel and you can count the requests.

Changes

If what is stored ever changes, this page changes with it in the same release. That rule is why the section about model files exists at all: the moment the board could fetch one, a page saying nothing is fetched from elsewhere would have been false, so it was rewritten in the release that made it so. There is no notification list to join, because there is nothing to notify you at.